Html Exploits
2,054 exploits tracked across all sources.
BOLDfx Recipe Script 5.0 - Multiple Remote Vulnerabilities
by Milos Zivanovic
BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities
by Milos Zivanovic
SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow
by Abysssec
MyActiveX <1.4.8.0 - Buffer Overflow
Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information.
by shinnai
WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabilities (2)
by MustLive
WordPress Plugin Fuctweb CapCC 1.0 CAPTCHA - Security Bypass
by MustLive
EasyMail Objects 'EMSMTP.DLL 6.0.1' - ActiveX Control Remote Buffer Overflow
by Will Dormann
Mozilla Firefox - Denial of Service
layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
by Carsten Book
AfterLogic WebMail Pro <4.7.10 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName and (2) HistoryKey parameters.
by Sébastien Duquette
EMC Captiva PixTools Distributed Imaging <2.2 - File Creation/Overw...
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.
by Giuseppe Fuggiano
IBM Installation Manager < 1.3.2 - Code Injection
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.
by bruiser
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow
by pyrokinesis
Persits Xupload - Path Traversal
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.
by pyrokinesis
Kylinsoft InstantGet 2.08 - ActiveX Control 'ShowBar' Method Buffer Overflow
by the_Edit0r
Quiksoft EasyMail 6.0.3.0 - IMAP 'connect()' ActiveX Buffer Overflow
by Sebastian Wolfgarten
Quiksoft EasyMail Objects 6 - Buffer Overflow
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method.
by bmgsec
Novell Groupwise Client 7.0.3.1294 - 'gxmim1.dll' ActiveX Control Buffer Overflow (PoC)
by Francis Provencher
EasyMail Objects 6.0.2.0 - 'emimap4.dll' ActiveX Control Remote Code Execution
by Francis Provencher
Apple iPhone 2.2.1/3.x - MobileSafari Crash + Reboot (Denial of Service)
by TheLeader
Kaspersky Anti-virus - Resource Management Error
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
by Prakhar Prasad
Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service
by Francis Provencher
Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (2)
by Francis Provencher
Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (1)
by Francis Provencher
Microsoft Internet Explorer - Code Injection
Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.
by Irfan Asrar
By Source