CVE-2008-2024

creationtimestamp| type| source ---|---|--- 2008-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5494...

VLC媒体播放器MP及Cinepak解码器缓冲区溢出漏洞

BUGTRAQ ID: 28904,28903 CVECAN ID: CVE-2008-1769,CVE-2008-1768 VLC Media Player是一款免费的媒体播放器。 VLC处理畸形格式的媒体文件时存在漏洞，如果用户受骗使用VLC播放器打开了特制的媒体文件或流媒体的话，就会在MP4和Cinepak解码器模块中触发缓冲区溢出，导致拒绝服务或执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200804-25）以及相应补丁: GLSA-200804-25：VLC:...

Unfixed XSS vulnerability at www.stampwants.com

Security researcher KrepTOr, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.stampwants.com, which at the time of submission ranked 221099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.minus.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.minus.lt, which at the time of submission ranked 3108015 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...

Unfixed XSS vulnerability at www.krea.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.krea.lt, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.sbasociacija.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.sbasociacija.lt, which at the time of submission ranked 3112848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

XOT Detection

The remote target is an XOT router. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid30122; scriptversion "1.14"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish: "XOT Detection"; scriptsetattributeattribute:"synopsis", value: "This plugin detects XOT X.25 over TCP....

oracle-dropsql.txt

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Oracle 10g R1 - xdb.xdbpitrigpkg PLSQL Injection Change Sys Password // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25,...

Unfixed XSS vulnerability at search.tennessean.com

Security researcher flux, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting search.tennessean.com, which at the time of submission ranked 30464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

GLSA-200711-25 : MySQL: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-25 MySQL: Denial of Service Joe Gallo and Artem Russakovskii reported an error in the convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine that is leading to a failed assertion when handling CONTAINS...

Unfixed XSS vulnerability at harzack.freeshell.org

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting harzack.freeshell.org, which at the time of submission ranked 65641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.gmail.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.gmail.it, which at the time of submission ranked 421085 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.fritolay.com.tr

Security researcher Kara, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.fritolay.com.tr, which at the time of submission ranked 1025999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.dii.unisi.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.dii.unisi.it, which at the time of submission ranked 75542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

CVE-2007-5562: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

XPCNativeWraper pollution using Script object — Mozilla

Mozilla security researcher mozbugra4 reported that it was possible to use the Script object to modify XPCNativeWrappers in such a way that subsequent access by the browser chrome--such as by right-clicking to open a context menu--can cause attacker-supplied javascript to run with the same...

Fedora Core 6 : openssh-4.3p2-25.fc6 (2007-715)

Tue Oct 2 2007 Tomas Mraz - 4.3p2-25 - do not fall back on trusted X11 cookies CVE-2007-4752 280471 - Fri Jul 13 2007 Tomas Mraz - 4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 - Thu Jun 21 2007 Tomas Mraz - 4.3p2-23 - document where the nss certificate and token dbs are...

Unfixed XSS vulnerability at www.m-2.ru

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.m-2.ru, which at the time of submission ranked 213020 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is currently...