CVE-2008-0231

Multiple directory traversal vulnerabilities in index.php in Tuned Studios 1 Subwoofer, 2 Freeze Theme, 3 Orange Cutout, 4 Lonely Maple, 5 Endless, 6 Classic Theme, and 7 Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page...

Mozilla Firefox 'Basic Realm' Basic Authentication Header Spoofing Vulnerability

Mozilla Firefox is prone to a domain-spoofing vulnerability that allows an attacker to spoof an HTTP basic authentication dialog. Attackers may exploit this vulnerability via a malicious webpage to spoof the origin of an HTTP basic authentication dialog that the victim may trust. Attackers may fi...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Apple Mac OS X v10.4.11之前版本多个安全漏洞

BUGTRAQ ID: 26444 CVECAN ID:...

[48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

48bits Advisory QuickTime Panorama Sample Atom Heap Overflow Abstract: QuickTime is prone to a heap overflow vulnerability when parsing malformed Panorama Sample Atoms, which are used in QuickTime Virtual Reality Movies. This Vulnerability allows attackers to execute code on vulnerable...

CVE-2002-2308

Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...

Microsoft Internet Explorer Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers spoof the address bar of a trusted site. Attackers may exploit this vulnerability via a malicious webpage to spoof the contents and origin of a page that the victim may trust. Attackers may find this issue...

apple-overflow.txt

---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or via a webpage. In the later scenar...

Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC

Exploit for multiple platform in category dos / poc ====================================================== Apple Quicktime SRC="available-sample.qtif" QTSRC="poc.smil" WIDTH="10" HEIGHT="10" PLUGINSPAGE=" www.apple.com/quicktime/download" TYPE="video/quicktime" /...

IBM AIX rmpvc工具本地缓冲区溢出漏洞

BUGTRAQ ID: 25217 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的rmpvc工具在处理命令行参数时存在缓冲区溢出漏洞，本地攻击可能利用此漏洞导致系统崩溃。 如果执行rmpvc -l port logical name命令时，logical namel参数超过16个字符的话，就可以触发这个溢出，导致系统崩溃。 IBM AIX 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

LinkedIn IE工具栏IEContextMenu控件远程溢出漏洞

BUGTRAQ ID: 25032 LinkedIn是一个联网工具，帮助用户在线寻找各类工作或业务联系人。 LinkedIn的IEToolbar.IEContextMenu.1 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 LinkedIn工具栏的IEToolbar.IEContextMenu.1（LinkedInIEToolbar.dll）控件在处理Search方式时将VARIANT用作了varBrowser参数，如果用户受骗访问了恶意网页的话就可能触发缓冲区溢出，导致在用户浏览器会话中执行任意指令。 LinkedIn IE Toolbar...

Mozilla Foundation Security Advisory 2007-23

Mozilla Foundation Security Advisory 2007-23 Title: Remote code execution by launching Firefox from Internet Explorer Impact: Critical Announced: July 17, 2007 Reporter: Greg MacManus and Billy Rios Products: Firefox and Thunderbird Fixed in: Firefox 2.0.0.5 and Thunderbird 2.0.0.5 Description...

Apple QuickTime 7.1.5 - Information Disclosure / Multiple Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/24873/info Apple QuickTime is prone to an information-disclosure and multiple remote code-execution vulnerabilities. Remote attackers may exploit these issues by enticing victims into opening maliciously crafted files or visiting maliciously crafted...

Apple Safari 3.0.x for Windows - Document.Location.Hash Buffer Overflow

Apple Safari 3.0.x for Windows - Document.Location.Hash Buffer Overflow source: https://www.securityfocus.com/bid/26448/info Safari for Windows is prone to a buffer overflow that occurs when an attacker entices a victim to view a maliciously crafted webpage. A remote attacker may exploit this iss...

Apple Safari 3.0.x for Windows - 'Document.Location.Hash' Buffer Overflow

source: https://www.securityfocus.com/bid/26448/info Safari for Windows is prone to a buffer overflow that occurs when an attacker entices a victim to view a maliciously crafted webpage. A remote attacker may exploit this issue to execute arbitrary machine code in the context of the affected...

Safari for Windows, 0day URL protocol handler command injection

Apple released version 3 of their popular Safari web browser today, with the added twist of offering both an OS X and a Windows version. Given that Apple has had a lousy track record with security on OS X, in addition to a hostile attitude towards security researchers, a lot of people are expecti...

Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5

Hi, I'd like to inform you about a XSS-vulnerability in Adobe RoboHelp 6, RoboHelp Server 6 and RoboHelp X5. See attached advisory below. I - TITLE Security advisory: Cross-Site Scripting in RoboHelp 6, RoboHelp Server 6 and RoboHelp X5 II - SUMMARY Description: A Cross-Site Scripting Flaw in...

Kaspersky AntiVirus SysInfo ActiveX控件信息泄露漏洞

Kaspersky Antivirus是一款流行的反病毒程序。 Kaspersky Antivirus ActiveX控件存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 问题存在于如下控件中： ProgID: KL.SysInfo Clsid: BA61606B-258C-4021-AD27-E07A3F3B91DB File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AxKLSysInfo.dll Version: 5.0.5.0...

IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit ========================================================== /...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...