CVE-2007-3694-bm.txt

Source: http://int21.de/cve/CVE-2007-3694-bm.html Cross site scripting XSS in broadcast machine References http://www.getmiro.com/create/broadcast/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3694 Description Cross site scripting describes attacks that allow to insert malicious html or...

psm-rfi.txt

PhpSiteManager-Beta2 Remote File Inclusion Vulnerability Version Released 2007-05-01 ------------------| Timeline:10:11:07 | ------------------| Download : --------------------------------------------------------------------------------------------------------|...

CVE-2007-5935

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag...

CVE-2007-5937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

CVE-2007-5940: Improper Link Resolution Before File Access

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file...

CVE-2007-5935: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag...

KLA10395 LPE vulnerability in WinPcap

Array index errors were found in WinPcap. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed IOCTL request. Original advisories WinPcap changelog Exploitation Related products WinPcap CVE list CVE-2007-5756 hi...

Macrovision SafeDisc secdrv.sys Crafted METHOD_NEITHER IOCTL Local Overflow

Macrovision SafeDisc, a copy-protection application for Microsoft Windows, is installed on the remote host. The 'SECDRV.SYS' driver included with the version of SafeDisc currently installed on the remote host enables a local user to gain SYSTEM privileges using a specially crafted argument to the...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment. This includes...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment. This...

[slackware-security] xpdf/poppler/koffice/kdegraphics

New xpdf packages are available for Slackware 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current. New poppler packages are available for Slackware 12.0 and -current. New koffice packages are available for Slackware 11.0, 12.0, and -current. New kdegraphics packages are available for Slackware 10.2,...

iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities

iDefense Security Advisory 11.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 09, 2007 I. BACKGROUND America Online's AmpX is an ActiveX control associated with AOL Radio. It is typically used for embedding streaming audio content in web pages. For more information visit the...

Unfixed XSS vulnerability at www.tiens-istanbul.com

Security researcher Uber0n, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.tiens-istanbul.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is...

Unfixed XSS vulnerability at www.moviepink.net

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.moviepink.net, which at the time of submission ranked 12784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

Unfixed XSS vulnerability at www.gsme.ncyu.edu.tw

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.gsme.ncyu.edu.tw, which at the time of submission ranked 40999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is...

[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1403-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.grade1.co.uk

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.grade1.co.uk, which at the time of submission ranked 1912863 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2007. It is currentl...

Unfixed XSS vulnerability at www.atwebresults.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.atwebresults.com, which at the time of submission ranked 344288 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is...

Unfixed XSS vulnerability at mall.maybank2u.net

Security researcher DerickTham, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting mall.maybank2u.net, which at the time of submission ranked 20412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/02/2008. It is...

Unfixed XSS vulnerability at www.rs-mark.schulnetz.hamm.de

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.rs-mark.schulnetz.hamm.de, which at the time of submission ranked 260187 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It...