CVE-2015-7802

gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service uninitialized memory read via a crafted GIF file...

DEBIAN-CVE-2015-7802

gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service uninitialized memory read via a crafted GIF file...

DEBIAN-CVE-2016-3981

Heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file...

Optipng Denial of Service Vulnerability

OptiPNG is a set of tools for lossless compression of images. A security vulnerability exists in OptiPNG versions prior to 0.7.6, which stems from the program failing to perform a bounds check for increasing or decreasing 'crtrow' values when processing delta escape characters for bitmap images. ...

Azureus HTML WebUI 0.7.6 - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28848/info Azureus HTML WebUI is prone to a cross-site request-forgery vulnerability. Successful exploits aid in transferring malicious content to unsuspecting users' computers, aiding in further attacks. Other actions ma...

Buildbot Multiple Cross-Site Scripting Vulnerabilities

This host is installed with Buildbot and is prone to multiple Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbbuildbotmultxssvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Buildbot Multiple Cross-Site Scripting Vulnerabilities Authors: Nikita MR Copyright: Copyright c 2009...

Buildbot Multiple Cross-Site Scripting Vulnerabilities

Buildbot is prone to multiple Cross Site Scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2967

CVE-2009-2967 describes multiple cross-site scripting (XSS) vulnerabilities in Buildbot versions 0.7.6 through 0.7.11p2. Remote attackers can inject arbitrary web script or HTML via unspecified vectors in the Buildbot web interface. The description does not specify affected components beyond the ...

CVE-2009-2959

Cross-site scripting XSS vulnerability in the waterfall web status view status/web/waterfall.py in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

CVE-2008-4436

SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

Gentoo Security Advisory GLSA 200408-09 (Roundup)

The remote host is missing updates announced in advisory GLSA 200408-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

bblog-sql.txt

BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln: if$GET'mod' $pluginrow = $bBlog-getrow"select from ".TPLUGINS." where name='".$GET'mod'."' and type='modifier'"; PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bbauthors-- help: On the number you can see...

BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== BBlog 0.7.6 mod Remote SQL Injection Vulnerability ==================================================== BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln:...

Azureus HTML WebUI 0.7.6 - Cross-Site Request Forgery

Azureus HTML WebUI 0.7.6 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28848/info Azureus HTML WebUI is prone to a cross-site request-forgery vulnerability. Successful exploits aid in transferring malicious content to unsuspecting users' computers, aiding in further...

GFax 0.7.6 - Temporary Files Local Arbitrary Command Execution

source: https://www.securityfocus.com/bid/24780/info GFAX is prone to a vulnerability that lets local attackers execute arbitrary commands with superuser privileges. Successful attacks will result in the complete compromise of affected computers. GFAX 0.7.6 is vulnerable; other versions may also ...

CVE-2007-2766

Backup Manager’s lib/backup-methods.sh vulnerable before 0.7.6: the MySQL password is exposed as a plaintext command-line argument, allowing local attackers to read it by listing the process arguments. Affected product: Backup Manager; vulnerable component/file: lib/backup-methods.sh; affected ve...

CVE-2007-0259

CVE-2007-0259 affects Ezboxx Portal System Beta 0.7.6 and earlier. The vulnerability arises from an invalid cat parameter to the boxx/knowledgebase.asp page, causing an error message that reveals the server path. This exposes sensitive information to remote attackers. Exploitation details, affect...

ezboxxezroot.txt

Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...

Ezboxx multiple vulnerabilities.

Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...