Unfixed XSS vulnerability at fog.adsv.jp

Security researcher kusomiso.com, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting fog.adsv.jp, which at the time of submission ranked 1015401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.sunway.com.my

Security researcher DerickTham, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.sunway.com.my, which at the time of submission ranked 87836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is...

MOG-WebShop (index.php group) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3...

Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit

Exploit for macOS platform in category local exploits ============================================================== Apple Mac OS X mountsmbfs Stack Based Buffer Overflow Exploit ============================================================== / Copyright C 2007-2008 Subreption LLC. All rights...

KLA10341 ACE vulnerability in St. Bernard Open File Manager

A buffer overflow was found in St. Bernard Open File Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Related products St-Bernard-Open-File-Manage...

CentOS 4 / 5 : mysql (CESA-2007:1155)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server...

Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)

According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Upgraded Thunderbird 1.5.0.13 missing fix for MFSA 2007-23 — Mozilla

Mozilla tester Stephen Donner reported that only users who installed Thunderbird 1.5.0.13 using the install package received the fix for MFSA 2007-23. Users who upgraded to Thunderbird 1.5.0.13 from an earlier version using the automatic update mechanism were not protected. If those users browsed...

Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module Advisory ID: cisco-sa-20071219-fwsm ============ Revision 1.0 ============ Last Updated 2007 December 19 1600 UTC GMT For Public Release 2007 December 19...

CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354...

Integer overflow

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355...

CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354...

CVE-2007-6356

exiftags before 1.01 allows attackers to cause a denial of service infinite loop via recursive IFD references in the EXIF data in a JPEG image...

CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354...

CVE-2007-6433

CVE-2007-6433 affects JBoss Seam 2.x before 2.0.0.CR3. The vulnerability resides in getRenderedEjbql / setOrder in the org.jboss.seam.framework.Query class, where user-supplied order parameters are not properly validated, allowing remote attackers to inject and execute arbitrary EJB QL commands. ...

CVE-2007-6354

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355...

CVE-2007-6355

CVE-2007-6355 relates to an integer overflow in exiftags prior to version 1.01, with the Debian/GLSA entries detailing multiple CVEs in the same package. The vulnerabilities stem from inadequate input validation in exiftags, including: (1) CVE-2007-6354 — invalid memory access on crafted images, ...

CVE-2007-6435

CVE-2007-6435 is a stack-based buffer overflow in the Novell GroupWise Client triggered when processing HTML emails containing a crafted IMG SRC attribute. The vulnerability requires the HTML Preview feature and user action (reply/forward) to exploit, enabling remote code execution on vulnerable ...

CVE-2007-6436

A stack-based buffer overflow exists in JSGCI.DLL within JustSystems Ichitaro 2005, 2006, and 2007 . This vulnerability allows user-assisted remote attackers to execute arbitrary code by processing a crafted document . This flaw was actively exploited in December 2007 by the Tarodrop.F trojan . S...

CVE-2007-6356

The CVE-2007-6356 issue affects exiftags prior to version 1.01, where cyclical EXIF IFD references in JPEG metadata can cause a denial of service (infinite loop). Public references show remediation across Debian/Etch and Sarge updates fixing these issues (0.98-1.1+etch1 and 0.98-1.1+0sarge1; late...