1249 matches found
adobe9-dos.txt
arg1="acroie:///DoS" target.src = arg1...
ppmate-dospoc.txt
arg1=String10000, "A" target.StartURLarg1...
MS Windows (HTA) Script Execution Exploit (MS05-016)
No description provided by source. / Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You need make a .hta...
Black Ice Software Inc Barcode SDK (BITiff.ocx) Remote BOF Exploit (2)
No description provided by source. Black Ice Software Inc Barcode SDK BITiff.ocx Remote Buffer Overflow url: http://www.blackice.com File : BITiff.ocx Ver. : 10.9.3.0 CLSID: 2324B5B7-D3EF-464C-BB35-06EFF8F11EB3 Mark.: RegKey Safe for Script: True RegKey Safe for Init: True...
QuickerSite 1.8.5 Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description:...
quicksite-multi.txt
www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...
QuickerSite 1.8.5 - Multiple Vulnerabilities
QuickerSite 1.8.5 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1...
ibiz-insecure.txt
-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...
CVE-2008-0083
The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...
Code injection
The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-0083
CVE-2008-0083 affects Microsoft VBScript/JScript scripting engines (VBScript.dll and JScript.dll) version 5.1 and 5.6 used in Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. A vulnerability in decoding scripts in Web pages and in memory loading could allow remote code execution through unknown...
Microsoft Windows VBScript / JScript buffer overflow
Buffer overflow on scripts parsing...
Microsoft Windows Scripting Engines Script Encoding Code Execution (MS08-022; CVE-2008-0083)
VBScript stands for Microsoft Visual Basic Scripting Edition that includes Web client scripting in Microsoft Internet Explorer and Web server scripting in Microsoft Internet Information Service. JScript is the Microsoft implementation of the ECMA 262 language specification ECMAScript Edition 3. T...
Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulnerability
Description Microsoft VBScript and JScript are prone to a remote code-execution vulnerability because they fail to adequately handle user-supplied input. Attackers can leverage this issue by enticing an unsuspecting user to view a malicious web document. Successful exploits would allow arbitrary...
Microsoft Security Bulletin MS08-022 – Critical Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)
Microsoft Security Bulletin MS08-022 – Critical Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution 944338 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the...
MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)
The remote host is running a version of Windows that contains a flaw in JScript. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious JScript and enticing a victim to visit a web site or view a specially crafted email message. C Tenable Network Security...
Data Dynamics ActiveBar (Actbar3.ocx 3.2) - Multiple Insecure Methods
------------------------------------------------------------------------------------ Data Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods url: http://www.datadynamics.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...
Chilkat HTTP ChilkatHttp.dll ActiveX控件不安全调用漏洞
BUGTRAQ ID: 28546 Chilkat HTTP是用于与服务器通讯的HTTP客户端组件。 Chilkat HTTP组件的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞非授权访问系统上的文件。 Chilkat HTTP组件的ChilkatHttp.ChilkatHttp.1和ChilkatHttp.ChilkatHttpRequest.1 ActiveX控件（ChilkatHttp.dll）没有正确地验证对SaveLastError方式的输入参数，如果用户受骗访问了恶意网页的话，就可能导致覆盖并破坏系统上的任意文件。 Chilkat Software...
chilkathttp-overwrite.txt
-------------------------------------------------------------------- ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite url: www.chilkatsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...
EB Design Pty Ltd - EBCRYPT.dll 2.0 Multiple Remote Vulnerabilities
EB Design Pty Ltd - EBCRYPT.dll 2.0 Multiple Remote Vulnerabilities ----------------------------------------------------------------------------- EB Design Pty Ltd EBCRYPT.DLL v.2.0 Multiple Remote Vulnerabilites url: http://www.ebcrypt.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...