Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)

No description provided by source. include stdio.h include stdlib.h / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied inpu...

Yahoo! 统计功能跨站脚本漏洞

yahoo统计功能被广泛用于站点的访问统计，用于做各种数据分析如访问来源，客户访问页面统计等等，具体信息可以访问网址 http://tongjia.yahoo.cn。但是80sec发现该功能存在严重的漏洞，可能导致用户信息被窃取，并且可以占有该用户的yahoo ID，进入包括mail.yahoo.cn之内的其他服务。 yahoo统计功能在获得用户提交的参数时缺少必要的过滤，导致恶意用户可以提交精心构造的数据进入控制面板后台，譬如访问地址信息就会不加过滤地进入后...

wellyblog-xss.txt

Virangar Security Team Tilte: WellyBlog Open Source Blog Portal Cross Site Scripting Vulnerabilitiy Author..................: theEdit0r Homepage ...............: Www.Virangar.netwww.virangar.ir Location ...............: Iran Software ...............: WellyBlog Open Source Blog Portal Site Script...

Yahoo! Statistical functions cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Source: 80sec Vulnerability Description: The yahoo statistics function is widely used for site access statistics, used to make a variety of data analysis such as access to the source, The Client Access page statistics, etc., specific information can access the web site http://tongjia. yahoo. cn...

AOL AIM SIPFoundry sipXtapi RTP Processing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of any communication application utilizing the SIP Foundry API. This includes vendors such as AOL, Yahoo, Skype, Oracle, Nortel and more. Authentication is not required to exploit these vulnerabilitie...

Memory corruption

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The CVE-2008-2111 entry concerns the ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier. The vulnerability is a memory corruption issue in the Ynoifier COM object that enables remote attackers to execute arbitrary code. Affected component: ActiveX/yNotifier.dll within Yahoo! Assi...

Yahoo! 助手(3721) ActiveX远程代码执行漏洞

漏洞存在于ynotifier.dll这个ActiveX控件. 成功利用此漏洞可以使得攻击者能够在安装了Yahoo!助手的电脑上执行任意代码. 成功利用此漏洞需要诱使用户访问特定网页. 在通过IE初始化Ynoifier COM对象时,会出现一个可利用的内存破坏漏洞. c78.fa0: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handle...

Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption

source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX...

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute...

Yahoo! Music Jukebox ActiveX Control Multiple Buffer Overflows (CVE-2008-0623; CVE-2008-0624; CVE-2008-0625)

Yahoo! Music Jukebox is a freeware media player for Microsoft Windows. Multiple buffer overflow vulnerabilities have been reported in Yahoo! Music Jukebox. The vulnerabilities are due to boundary errors in certain Yahoo! Music Jukebox ActiveX controls. To trigger these issues, an attacker may...

Fedora 7 : centerim-4.22.4-1.fc7.1 (2008-2869)

This update fixes the CVE-2008-1467 security issue by disabling the 'actions' configuration altogether. Furthermore the default web browser is no longer configurable in CenterIM. The links get open in the default web browser configured, using xdg-utils. There won't be any update for centericq. Al...

Fedora 8 : centerim-4.22.4-1.fc8 (2008-2867)

This update fixes the CVE-2008-1467 security issue by disabling the 'actions' configuration altogether. Furthermore the default web browser is no longer configurable in CenterIM. The links get open in the default web browser configured, using xdg-utils. This release adds support for new versions ...

[SECURITY] Fedora 8 Update: centerim-4.22.4-1.fc8

CenterIM is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, MSN, AIM TOC, IRC, Gadu-Gadu and Jabber protocols. Internal RSS reader and a client for LiveJournal are provided...

Authentication Capture: IMAP

This module provides a fake IMAP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: IMAP', 'Description' = %...

Yahoo! Music Jukebox AddImage函数ActiveX远程栈溢出漏洞

BUGTRAQ ID: 27590 CVECAN ID: CVE-2008-0623 Yahoo! Music Jukebox是一款音乐编辑、管理、刻录软件。 Yahoo! Music Jukebox的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Music Jukebox所安装的YMP DataGrid ActiveX控件（datagrid.dll）没有正确地处理传送给AddImage方式的输入参数，如果用户受骗访问了恶意站点并向该参数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Music Jukebox...

Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...

Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...