America Online ICQ ActiveX Control Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of AOL ICQ. User interaction is not required to exploit this vulnerability. The specific flaw exists in the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control with the following CLSID:...

CVE-2006-5711

ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI...

Microsoft Internet Explorer MHTML URI处理器信息泄露漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理有“mhtml:”URI处理器的URL的重新定向时存在漏洞，可能允许用户访问其他WEB站点所服务的文档。 Microsoft Internet Explorer 6 for Windows XP SP2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp...

Microsoft Internet Explorer嵌入图象URI欺骗漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer在处理部分URI连接时存在问题，远程攻击者可以利用这个漏洞隐藏URI连接中的真实内容，诱骗用户访问恶意站点。 图象包含在正确格式的HREF标记中时，可隐藏URI连接中的真实内容，这个漏洞可诱骗用户访问一个非法连接而不被怀疑。 攻击者可以通过提供恶意图象使的显示的URI连接指向合法信任的站点，如果没有任何怀疑的用户把鼠标移到相关的链接，可能导致他们认为链接的是信任正确的站点而被欺骗。 Microsoft Internet Explorer 6.0SP1...

Microsoft Windows MHTML超长URI串溢出漏洞（MS06-043）

Microsoft Windows是微软发布的非常流行的操作系统。 inetcomm.dll在使用"mhtml:" URI解析器处理URL时存在栈溢出漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过超长的URL来触发这个漏洞，如诱骗用户通过Internet Explorer打开恶意的站点或打开特制的Internet快捷方式。 Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 x64 Edition Microsoft...

Microsoft IE FTP URI处理任意FTP命令执行漏洞（MS06-042）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer对URI参数串的处理上存在漏洞，远程攻击者可能利用此漏洞在用户访问的FTP服务器上执行恶意命令。 Internet Explorer允许用户在地址栏中输入ftp://ftpuser:ftppass@server/directory 以访问登录FTP服务器。如果攻击者在FTP命令前加入URL编码的换行符（%0a）的话，就可以通过ftp:// URL向FTP会话中注入命令。但攻击者只能执行用户可以在FTP服务器上允许执行的操作。 Microsoft...

Opera Web浏览器URI标签解析堆溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera浏览器在解析包含有URL的标签时存在堆溢出漏洞，成功利用这个漏洞的攻击者可能以登录用户的权限执行任意代码，失败的攻击也可能导致浏览器崩溃。 在解析过程中分配了256字节的堆缓冲区，但没有经过长度检查便将标签的URL拷贝到了这个缓冲区。C/C++的漏洞代码如下： char localurl = malloc256; strcpylocalurl, tagurl; Opera Software Opera 9.01 Opera Software Opera 9.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-5034

Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2006-5018

ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...

CVE-2006-5018

ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...

CVE-2006-5050

CVE-2006-5050 affects BusyBox by its httpd component, enabling directory traversal through URL-encoded "%2e%2e/" sequences in the URI. The underlying issue is a path traversal vulnerability that could allow remote attackers to read arbitrary files. According to the NVD entry, this is a network-ac...

CVE-2006-5035

Multiple cross-site scripting XSS vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the statusmsg parameter in RegisterPage.cgi or 2 a URI corresponding to a nonexistent file. NOTE: the provenance of this information is...

CVE-2006-5050

Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI...

CVE-2006-4706

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space, as demonstrated usin...

Easy Address Book Web Server format string vulnerability

Format string vulnerability on URI request parsing...

PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection

PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

CVE-2006-3848

Cross-site scripting XSS vulnerability in CGI wrapper for IP Calculator IPCalc 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI REQUESTURI environment variable, which is used in the actionurl variable...