i.FTP 2.21 - Time Field (SEH)

i.FTP 2.21 - Time Field SEH !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software...

JVN#74547976: Fumy Teacher's Schedule Board vulnerable to cross-site scripting

Fumy Teacher's Schedule Board provided by Nishishi Factory is a CGI program that displays schedules. Fumy Teacher's Schedule Board contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest...

GNU C Library Denial of Service Vulnerability

The GNU C Library is an implementation of the C library in the latest systems of the GNU system and the Linux kernel. A denial of service vulnerability exists in versions of the GNU C Library prior to 2.21, which allows remote attackers to launch denial of service attacks...

grep: Denial of service

Background grep is the GNU regular expression matcher. Description A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact A local user can cause Denial of Service. Workaround There is no known workaround at this time. Resolution All grep users should upgrade to the...

Out-of-bounds

The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...

thttpd 2.2x defang Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software, leading to ...

Fedora 20 : seamonkey-2.21-1.fc20 (2013-17338)

Update to 2.21 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2013-1737

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass...

PT-2013-3357 · Mozilla +2 · Firefox Esr +6

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 24.0 Firefox ESR versions prior to 17.0.9 Thunderbird versions prior to 24.0 Thunderbird ESR versions prior to 17.0.9 SeaMonkey versions prior to 2.21 Description: The issue allows local users to gain...

CVE-2010-1072

CVE-2010-1072 describes an XSS vulnerability in Sniggabo CMS 2.21, exploitable via the q parameter in search.php. The root cause is insufficient input sanitization allowing arbitrary web script or HTML to be injected. Affected software/function/file: Sniggabo CMS 2.21, search.php (q parameter). I...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Stack overflow

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...

AlleyCode 2.21 SEH Overflow

What is AlleyCode? AlleyCode is a free html editor. Alleycode was chosen as one of the best freebies on the Net. The entire list of the ' 101 Fabulous Freebies' was featured in the May 2006 issue of PCWorld Magazine. Thanks PCWorld... Alleycode is a fast, sleek and highly productive award winning...

Alleycode 2.21 - Local Overflow (SEH)

What is AlleyCode? AlleyCode is a free html editor. Alleycode was chosen as one of the best freebies on the Net. The entire list of the ' 101 Fabulous Freebies' was featured in the May 2006 issue of PCWorld Magazine. Thanks PCWorld... Alleycode is a fast, sleek and highly productive award winning...

CVE-2008-4511

Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-0433

CVE-2008-0433 concerns Agares phpAutoVideo 2.21 and earlier, where a PHP remote file inclusion flaw exists in theme/phpAutoVideo/LightTwoOh/sidebar.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the loadpage parameter. This entry is corrob...

Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities

----------------------------------------------------------------------------------- - Author : H-T Team HouSSaMix & ToXiC350 From MoRoCCo - ----------------------------------------------------------------------------------- Script : Agares PhpAutoVideo 2.21 and below Download :...

agares-xssrfi.txt

----------------------------------------------------------------------------------- - Author : H-T Team HouSSaMix & ToXiC350 From MoRoCCo - ----------------------------------------------------------------------------------- Script : Agares PhpAutoVideo 2.21 and below Download :...

CVE-2008-0262

SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter...

CVE-2007-6614

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...