18185 matches found
CVE-2007-6262
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...
Unfixed XSS vulnerability at www.trncpio.org
Security researcher eX0dus, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.trncpio.org, which at the time of submission ranked 9172077 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is current...
Unfixed XSS vulnerability at www.c2kni.org.uk
Security researcher Stuarty, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.c2kni.org.uk, which at the time of submission ranked 3686748 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/06/2007. It is...
Unfixed XSS vulnerability at www.blockstatus.com
Security researcher THE-SH0CK-B0Y, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.blockstatus.com, which at the time of submission ranked 12654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It i...
Unfixed Redirect vulnerability at gnduaa.org
Security researcher APS, has submitted on 12/06/2007 a Redirect vulnerability affecting gnduaa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently unfixed. If you believe tha...
[security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01293337 Version: 1 HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...
Unfixed XSS vulnerability at www.town.caledon.on.ca
Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.town.caledon.on.ca, which at the time of submission ranked 2764709 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/06/2007. It ...
[Full-disclosure] [SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...
SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities
SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell...
adv86-K-159-2007.txt
ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery = 2.0 beta 5 catid Remote SQL Injection Vulnerability -----------------------------------------------------------------------------------------...
SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple...
NetScaler Web Management Interface IP Address Cookie Information Disclosure
It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...
SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities
SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell...
Unfixed XSS vulnerability at www.fbe.unsw.edu.au
Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.fbe.unsw.edu.au, which at the time of submission ranked 8564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...
Unfixed XSS vulnerability at cn.posh.com.hk
Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting cn.posh.com.hk, which at the time of submission ranked 912354 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...
Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability Advisory ID: cisco-sa-20071205-csa http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml Revision 1.0 For Public Release 2007...
Unfixed XSS vulnerability at www.cast.org
Security researcher MaXWeL, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.cast.org, which at the time of submission ranked 497638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...
[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1419-1 [email protected] http://www.debian.org/security/ Martin Schulze December 5th, 2007 http://www.debian.org/security/faq -...
Moderate: Red Hat Security Advisory: openoffice.org2 security update
Updated openoffice.org2 packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite. HSQLDB is the default database engine...
