QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.8. Such versions are reportedly affected by two vulnerabilities : - An input validation issue in the QTPlugin.ocx ActiveX control could allow an attacker to force the application to jump to a location in memory...

QuickTime < 7.6.8 Multiple Vulnerabilities (Windows) (deprecated)

Binary data 5665.prm...

Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...

Apple QuickTime Remote Code Execution Vulnerability

The host is installed with Apple QuickTime and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbapplequicktimecodeexecvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple QuickTime Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Immunity Canvas: QUICK_PUNK

Name| quickpunk ---|--- CVE| CVE-2010-1818 Exploit Pack| CANVAS Description| quickpunk Notes| CVE Name: CVE-2010-1818 VENDOR: Apple Notes: Abyssec 0day VersionsAffected: 7.6.5 Repeatability: Infinite References: 'http://zerodayinitiative.com/advisories/ZDI-10-168/' CVE Url:...

CVE-2010-1818

CVE-2010-1818 affects Apple QuickTime QTPlugin.ocx (QuickTime 6.x and 7.x before 7.6.8). The vulnerability arises from an input validation error in the _Marshaled_pUnk parameter, triggering unmarshalling of an untrusted pointer and allowing remote code execution with the user’s privileges. Public...

CVE-2010-1818

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...

Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution

$Id: applequicktimemarshaledpunk.rb 10196 2010-08-30 21:52:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-1818

creationtimestamp| type| source ---|---|--- 2010-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14843 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16589 2018-05-29 15:50:33+00:00| seen|...

Debian Security Advisory DSA 1818-1 (gforge)

The remote host is missing an update to gforge announced via advisory DSA 1818-1. OpenVAS Vulnerability Test $Id: deb18181.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1818-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1818-1 : gforge - insufficient input sanitising

Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...

CVE-2009-1818

CVE-2009-1818 affects MaxCMS 2.0, where the admin/admin_manager.asp component is vulnerable to SQL injection via an m_username cookie in the add action. The underlying flaw allows remote attackers to execute arbitrary SQL commands with the potential to impact data. Public references confirm a wor...

CVE-2009-1818

creationtimestamp| type| source ---|---|--- 2009-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8672...

CVE-2008-1818

Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08...

CVE-2007-1818

CVE-2007-1818 is a PHP remote file inclusion vulnerability in the MOD_forum_fields_parse.php file of the Forum picture and META tags 1.7 module for phpBB. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter, enabling remote code execution ...

CVE-2007-1818

PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-1818

CVE-2006-1818 affects warforge.NEWS 1.0 with multiple XSS vectors. The description notes remote attackers can inject arbitrary web script or HTML via unspecified vectors, possibly including first_name and last_name in myaccounts.php. This entry is supported by NVD and related records showing XSS ...

CVE-2005-1818

CVE-2005-1818 affects NewLife Blogger prior to 3.3.1. Connected documents confirm multiple SQL injection vulnerabilities enabling remote attackers to execute arbitrary SQL commands via unknown attack vectors. The sources do not specify a patched version or remediation steps. Exploitation details ...

CVE-2004-1818

Cross-site scripting XSS vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter...