VLC媒体播放器字幕文件栈溢出漏洞

BUGTRAQ ID: 28274 CVECAN ID: CVE-2008-1881 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/subtitle.c文件的ParseSSA函数中存在栈溢出漏洞： if sscanf s, "Dialogue: %^,,%d:%d:%d.%d,%d:%d:%d.%d,%81920^\r\n", buffertext2, 如果用户受骗打开了SSA文件中的超长字幕的话，就可能触发这个溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------...

Unfixed XSS vulnerability at directory.oregonstate.edu

Security researcher PaPPy, has submitted on 25/04/2008 a cross-site-scripting XSS vulnerability affecting directory.oregonstate.edu, which at the time of submission ranked 6699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.stampwants.com

Security researcher KrepTOr, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.stampwants.com, which at the time of submission ranked 221099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.sbasociacija.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.sbasociacija.lt, which at the time of submission ranked 3112848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at www.krea.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.krea.lt, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.minus.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.minus.lt, which at the time of submission ranked 3108015 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...

XOT Detection

The remote target is an XOT router. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid30122; scriptversion "1.14"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish: "XOT Detection"; scriptsetattributeattribute:"synopsis", value: "This plugin detects XOT X.25 over TCP....

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Oracle 10g R1 - xdb.xdbpitrigpkg PLSQL Injection Change Sys Password // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25,...

oracle-dropsql.txt

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Unfixed XSS vulnerability at search.tennessean.com

Security researcher flux, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting search.tennessean.com, which at the time of submission ranked 30464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

GLSA-200711-25 : MySQL: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-25 MySQL: Denial of Service Joe Gallo and Artem Russakovskii reported an error in the convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine that is leading to a failed assertion when handling CONTAINS...

Unfixed XSS vulnerability at www.dii.unisi.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.dii.unisi.it, which at the time of submission ranked 75542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.gmail.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.gmail.it, which at the time of submission ranked 421085 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.fritolay.com.tr

Security researcher Kara, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.fritolay.com.tr, which at the time of submission ranked 1025999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at harzack.freeshell.org

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting harzack.freeshell.org, which at the time of submission ranked 65641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

XPCNativeWraper pollution using Script object — Mozilla

Mozilla security researcher mozbugra4 reported that it was possible to use the Script object to modify XPCNativeWrappers in such a way that subsequent access by the browser chrome--such as by right-clicking to open a context menu--can cause attacker-supplied javascript to run with the same...

Fedora Core 6 : openssh-4.3p2-25.fc6 (2007-715)

Tue Oct 2 2007 Tomas Mraz - 4.3p2-25 - do not fall back on trusted X11 cookies CVE-2007-4752 280471 - Fri Jul 13 2007 Tomas Mraz - 4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 - Thu Jun 21 2007 Tomas Mraz - 4.3p2-23 - document where the nss certificate and token dbs are...

Unfixed XSS vulnerability at portal2.ch

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting portal2.ch, which at the time of submission ranked 1161075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at anzwers.com.au

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting anzwers.com.au, which at the time of submission ranked 105744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...