Debian Security Advisory DSA 159-1 (python)

The remote host is missing an update to python announced via advisory DSA 159-1. OpenVAS Vulnerability Test $Id: deb1591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 159-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1198-1 (python2.3)

The remote host is missing an update to python2.3 announced via advisory DSA 1198-1. Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer...

Fedora 7 : bochs-2.3-7.fc7 (2007-1778)

This security update of bochs fixes CVE-2007-2894 : The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error. Note that Tenable Network Security...

CVE-2007-5710

Cross-site scripting XSS vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the postscolumns array parameter...

CVE-2007-5710

CVE-2007-5710 describes a Cross-site scripting (XSS) vulnerability in WordPress 2.3, specifically in wp-admin/edit-post-rows.php where the posts_columns array parameter is not properly sanitized. This allows remote attackers to inject arbitrary HTML/Script that runs in a user’s browser session. A...

CVE-2007-5710

Cross-site scripting XSS vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the postscolumns array parameter...

WordPress 2.3 - Edit-Post-Rows.php Cross-Site Scripting

WordPress 2.3 - Edit-Post-Rows.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26228/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

CVE-2003-1402

PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the urlhit parameter, a different vulnerability than CVE-2006-5015...

CVE-2003-1402

CVE-2003-1402 concerns a PHP remote file inclusion vulnerability in hit.php affecting Kietu 2.0 and 2.3. The flaw enables an attacker to run arbitrary PHP code by supplying a crafted value to the url_hit parameter. The description specifies the impact as remote code execution and contrasts this v...

CVE-2007-4803

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

atomix23-overflow.txt

0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com...

AtomixMP3 2.3 - .pls Local Buffer Overflow

AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...

AtomixMP3 2.3 (pls File) Local Buffer OverFlow Exploit

Exploit for unknown platform in category local exploits ====================================================== AtomixMP3 2.3 pls File Local Buffer OverFlow Exploit ====================================================== 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EI...

Heap overflow

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2893

CVE-2007-2893 describes a heap-based buffer overflow in Bochs’ NE2000 emulation (bx_ne2k_c::rx_frame in iodev/ne2k.cc). The flaw lets a local guest OS user write to arbitrary host memory and potentially gain host privileges by triggering TXCNT values to exceed device memory. Connected sources cor...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...

Crlf injection

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...