GIMP Script-Fu Server Buffer Overflow Vulnerability

GIMP Script-Fu Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)

/ There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the script-fu server overflows a buffer and overwrites...

SeaMonkey < 2.8.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.8.0. Such versions are potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the...

Donar Player 2.8.0 - Denial of Service

Title : Donar Player 2.8.0 Denial of Service Software link : http://www.donarzone.com/downloads/donar-player-setup-free.exe , http://www.donarzone.com/donar-player Version : 2.8.0 Tested on : Windows XP SP3 English Date : 3/07/2011 Author : X-h4ck Website : http://www.pirate.al , PirateAL Crew...

Donar Player 2.8.0 Denial Of Service

Title : Donar Player 2.8.0 Denial of Service Software link : http://www.donarzone.com/downloads/donar-player-setup-free.exe , http://www.donarzone.com/donar-player Version : 2.8.0 Tested on : Windows XP SP3 English Date : 3/07/2011 Author : X-h4ck Website : http://www.pirate.al , PirateAL Crew...

Bitweaver 2.8.0 - Multiple Vulnerabilities

Bitweaver 2.8.0 - Multiple Vulnerabilities exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC :...

CVE-2010-4209

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

strongSwan 2.8.0 VPN Detection

Binary data 5313.prm...

Code injection

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

Fedora 10 : xerces-c-2.8.0-5.fc10 (2009-8350)

This update fixes : - Bug 515515 - CVE-2009-1885 xerces-c, xerces-c27: Stack overflow when parsing recursive XML structures Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Stack overflow

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...

Vulnerabilities in OpenX

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Cross-Site Scripting и Redirector уязвимостях в OpenX. Full path disclosure: http://site/openx/www/delivery/fc.php?MAXtype=1 XSS: http://site/openx/www/delivery/fc.php?MAXtype=3Cscript3Ealertdocument.cookie3C/script3E XSS обх...

phprs-sql.txt

phpRS Version 2.8.0 kforum.php?akce=topic&TopID - SQL Injection Vulnerability http://www.supersvet.cz/phprs/ ---------------------------------------------------------- Bug founded by d3v1l Date: 12.09.2008 [email protected] http://security-sh3ll.com...

MolyX 2.8.0（魔力论坛）注射漏洞

魔力论坛最新版本 2.8.0 在登陆模块存在缺陷,通过精心构造代码获取管理员密码hash //login.php switch $INPUT'do' case 'login': $this-dologin; break; case 'logout': $this-dologout; break; case 'autologin': $this-autologin;---该函数存在漏洞 break; default: $this-loginpage; break; …… function autologin global $forums, $DB, $bboptions,...

XSS vulnerability in pagepicker.action and spacepagepicker.action

The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...

DEBIAN-CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

DEBIAN-CVE-2005-3534

Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...

Moderate: Red Hat Security Advisory: ypserv security update

Updated ypserv packages fixing a denial of service vulnerability are now available. The ypserv package contains the Network Information Service NIS server. A vulnerability has been discovered in the ypserv NIS server prior to version 2.7. If a malicious client queries ypserv via TCP and...

Moderate: Red Hat Security Advisory: : Updated ypserv packages fix a denial of service vulnerability

Updated ypserv packages fixing a denial of service vulnerability are now available. The ypserv package contains the Network Information Service NIS server. A vulnerability has been discovered in the ypserv NIS server prior to version 2.7. If a malicious client queries ypserv via TCP and...