PT-2013-1167

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.0 libxml2 versions 2.7.6 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XML PARSER EO...

aktiv-player 2.9.0 - Crash (PoC)

!/usr/bin/python Exploit Title: aktiv-player version 2.9.0 Crash PoC Exploit Author: metacom RST Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows 7 German filename = "poc.wma" buffer = "\x41" 3000 exploit = buffer textfile = openfilena...

FoxPlayer 2.9.0 Denial Of Service

!/usr/bin/python Exploit Title:Denial of Service in FoxPlayer version 2.9.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: metacom version: version 2.9.0 Category: poc Tested on: windows 7 German filename="evil.m3u" buffer = "\x41" 5000 textfile = openfilename...

FoxPlayer 2.9.0 - Denial of Service

FoxPlayer 2.9.0 - Denial of Service !/usr/bin/python Exploit Title:Denial of Service in FoxPlayer version 2.9.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: metacom version: version 2.9.0 Category: poc Tested on: windows 7 German filename="evil.m3u" buffer =...

FoxPlayer 2.9.0 - Denial of Service

!/usr/bin/python Exploit Title:Denial of Service in FoxPlayer version 2.9.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: metacom version: version 2.9.0 Category: poc Tested on: windows 7 German filename="evil.m3u" buffer = "\x41" 5000 textfile = openfilename...

CVE-2012-5882

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

CVE-2012-5882

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

KLA10299 LPE vulnerability in Prof-UIS

An untrusted path vulnerability was found in Prof-UIS. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Changelog Related products Prof-UIS CVE list CVE-2010-5264 high Solution Update to latest...

SiNG cms - Password.php Cross-Site Scripting

SiNG cms - Password.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55168/info SiNG cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

SiNG CMS 2.9.0 Cross Site Scripting

SiNG cms 2.9.0 email Remote XSS POST Injection Vulnerability alert"XSS";' / in...

SiNG cms 2.9.0 (email) Remote XSS POST Injection Vulnerability

Summary SiNG cms is a free modular Content Management System open source, based on a bunch of PHP / MySQL and intended use of the web server Apache. Description The application is prone to a reflected cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input to...

FreePBX 2.9.0 - 2.10.0 Multiple Vulnerabilities - Active Check

FreePBX is prone to multiple cross-site scripting XSS and remote command execution RCE vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security fix for the ALT Linux 5 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Security fix for the ALT Linux 6 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Pidgin < 2.9.0 gdk_pixbuf__gif_image_load() Denial of Service

The version of Pidgin installed on the remote host is earlier than 2.9.0. As such, it is potentially affected by a denial of service vulnerability. The function 'gdkpixbufgifimageload' contains an error that allows a crafted GIF image file, when used as a buddy image, to cause memory exhaustion a...

Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt1

June 27, 2011 Slava Semushin 2.9.0-alt1 - Updated to 2.9.0 + CVE-2011-2485: remote denial of service from corrupt buddy icons...

FLVPlayer4Free 2.9 - '.fp4f' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47045/info FLVPlayer4Free is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

CVE-2007-4100

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

CVE-2007-4100

CVE-2007-4100 affects MLDonkey prior to 2.9.0. The flaw occurs because the application does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, allowing remote attackers to bypass the IP blocklist. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with ...

CVE-2004-2612

CVE-2004-2612 affects BNC IRC proxy (version 2.9.0). The flaw allows remote attackers to access functionality intended for authorized users by providing an incorrect password, effectively bypassing authentication. The vulnerability is documented with high risk (CVSS-like metrics in cited records)...