PT-2009-4028 · Microsoft · Internet Explorer 7 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer 7 for Server 2003 SP2 Microsoft Internet Explorer 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 7 for Server 2008 SP2 Description: A remote code...

AdaptBB 1.0 Remote File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =- AdaptBB 1.0 Remote File Include =- =- Webpage: http://www.adaptbb.com =- Download http://sourceforge.net/project/downloading.php?groupid=253154&filename=AdaptBB1.0.zip...

Microsoft DirectX QuickTime媒体文件解析代码执行漏洞

BUGTRAQ ID: 35139 CVECAN ID: CVE-2009-1537 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析畸形的QuickTime媒体文件时存在错误，用户受骗打开了恶意的媒体文件就会导致执行任意代码。由于用户可能在浏览器中安装媒体播放插件，因此访问恶意网页就足以导致播放QuickTime文件，触发Quartz.dll中的漏洞。 Microsoft DirectX 9.0 Microsoft DirectX 8.1...

MRCGIGUY Message Box 1.0 - Insecure Cookie Handling

MRCGIGUY Message Box 1.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

Versalsoft HTTP Image Uploader is prone to ActiveX vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php FEDORA-2007-455

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2007-455 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2009-0529

Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2009-0529

The CVE-2009-0529 entry describes an XSS vulnerability in SnippetMaster Webpage Editor 2.2.2, where index.php accepts a language parameter that can be exploited to inject arbitrary web script or HTML by remote attackers. This is triggered via the language parameter and does not provide details on...

SnippetMaster Webpage Editor 2,2,2 (RFI/XSS) Multiple Vulnerabilities

No description provided by source. SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://www.snippetmaster.com/download/manual-install.php Download Dezender Script : http://www.mediafire.com/?jv3gz1zwjxm - Found By : RoMaNcYxHaCkEr - My Site :...

SnippetMaster Webpage Editor 2 2 2 (RFI/XSS) Multiple Vulnerabilities

No description provided by source. SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://www.snippetmaster.com/download/manual-install.php Download Dezender Script : http://www.mediafire.com/?jv3gz1zwjxm - Found By : RoMaNcYxHaCkEr - My Site :...

SnippetMaster Webpage Editor 2,2,2 (RFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== SnippetMaster Webpage Editor 2,2,2 RFI/XSS Multiple Vulnerabilities ===================================================================== SnippetMaster Webpage Editor...

SnippetMaster Webpage Editor RFI / XSS

SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://www.snippetmaster.com/download/manual-install.php Download Dezender Script : http://www.mediafire.com/?jv3gz1zwjxm - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group :...

SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion Cross-Site Scripting

SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion Cross-Site Scripting SnippetMaster Webpage Editor 2,2,2 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://www.snippetmaster.com/download/manual-install.php Download Dezender Script :...

ExcelOCX 3.2 Insecure Method

/ --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp Safe: Safe for untrusted: caller,data - IPersist Safe...

Joomla! Component com_newsflash - id SQL Injection

Joomla! Component comnewsflash - id SQL Injection Joomla newsflash Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike Nitrous ! ModuleName: newsflash ! ScriptName: mambo and joomla ! GoogleDork: inurl:"comnewsflash"...

BulletProof FTP客户端.bps文件处理栈溢出漏洞

BUGTRAQ ID: 33024 BulletProof FTP Server之前名为G6 FTP Server，是一款全功能的Windows平台FTP服务器软件。 如果用户受骗使用BulletProof FTP Server的客户端加载了恶意的.bps文件的话，就可能触发栈溢出，导致执行任意指令。 BulletProof FTP Client BulletProof Software -------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bpftp.com/...

Modify the shellcode XOR encryption of 0day-vulnerability warning-the black bar safety net

Author: 7i As early as the Thunderbolt came out,for the first time this technique,the original code will understand no,this 0day once again,the XOR value is 2 1,now finally decided to self-write a version of PHP,yea yeah yea... A friend asked how to find the XOR value is how much,online have a...

Chilkat Socket ActiveX SaveLastError()任意文件覆盖漏洞

BUGTRAQ ID: 32333 Chilkat socket组件为TCP/IP套接字编程提供简单易用的API。 ChilkatSocket.ChilkatSocket.1 ActiveX控件（ChilkatSocket.dll）没有正确地验证对SaveLastError方式所提供的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了恶意输入的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件。 Chilkat Software ChilkatSocket.DLL 2.3.1.1 临时解决方法： 为clsid...