Mozilla Firefox 3.5.3 - Floating Point Conversion Heap Overflow

source: https://www.securityfocus.com/bid/36851/info Mozilla Firefox is prone to a heap-based buffer-overflow vulnerability. An attacker can exploit this issue by tricking a victim into visiting a malicious webpage to execute arbitrary code and to cause denial-of-service conditions. NOTE: This...

Outlook Web Access Attack Using Pushdo Botnet

Here are some technical details on the Outlook Web Access phishing scheme. 1. The Spam According to our preliminary research, the spam emails which attacked OWA users, including Kaspersky, were sent using the pushdo botnet – which is based on malware from the Backdoor.Win32.NewRes family. These...

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution source: https://www.securityfocus.com/bid/36668/info Adobe Reader and Acrobat are prone to a remote code-execution vulnerability because they fail to properly handle certain COM objects. An attacker can exploit this...

HEAT Call Logging 8.01 - SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

HEAT Call Logging 8.01 - SQL Injection

HEAT Call Logging 8.01 - SQL Injection = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=-...

Microsoft JScript Scripting Engine Keyword Arguments Remote Code Execution Vulnerability

Description Microsoft JScript is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied input. Attackers can leverage this issue by enticing unsuspecting users to view a malicious webpage. Successful exploits would allow arbitrary code to run with the...

HTML Creator & Sender 2.3 build 697 - Local Buffer Overflow (SEH)

!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...

PHP Competition System 0.84 SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability showmatchs.php competition PHP Competition System BETA = V0.84 http://phpcompet.free.fr/ http://phpcompet.free.fr/downloaden.html AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

JVN#29852698 Cross-site scripting vulnerability in RevoCounter CGI (Animation Counter)

RevoCounter CGI Animation Counter from futomi's CGI Cafe is a software that displays an animated counter on a webpage. RevoCounter CGI Animation Counter contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Softwar...

PT-2009-4028 · Microsoft · Internet Explorer 7 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer 7 for Server 2003 SP2 Microsoft Internet Explorer 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 7 for Server 2008 SP2 Description: A remote code...

AdaptBB 1.0 Remote File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =- AdaptBB 1.0 Remote File Include =- =- Webpage: http://www.adaptbb.com =- Download http://sourceforge.net/project/downloading.php?groupid=253154&filename=AdaptBB1.0.zip...

Microsoft DirectX QuickTime媒体文件解析代码执行漏洞

BUGTRAQ ID: 35139 CVECAN ID: CVE-2009-1537 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析畸形的QuickTime媒体文件时存在错误，用户受骗打开了恶意的媒体文件就会导致执行任意代码。由于用户可能在浏览器中安装媒体播放插件，因此访问恶意网页就足以导致播放QuickTime文件，触发Quartz.dll中的漏洞。 Microsoft DirectX 9.0 Microsoft DirectX 8.1...

MRCGIGUY Message Box 1.0 - Insecure Cookie Handling

MRCGIGUY Message Box 1.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

Versalsoft HTTP Image Uploader is prone to ActiveX vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...

Fedora Update for php FEDORA-2007-455

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2007-455 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2009-0529

Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2009-0529

The CVE-2009-0529 entry describes an XSS vulnerability in SnippetMaster Webpage Editor 2.2.2, where index.php accepts a language parameter that can be exploited to inject arbitrary web script or HTML by remote attackers. This is triggered via the language parameter and does not provide details on...

SnippetMaster Webpage Editor 2,2,2 (RFI/XSS) Multiple Vulnerabilities

No description provided by source. SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://www.snippetmaster.com/download/manual-install.php Download Dezender Script : http://www.mediafire.com/?jv3gz1zwjxm - Found By : RoMaNcYxHaCkEr - My Site :...