73 matches found
Winamp < 5.6 Multiple Vulnerabilities
The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.6. Such versions are potentially affected by the following vulnerabilities : - An integer overflow vulnerability exists in the 'innsv.dll' plugin when parsing the...
Racer 0.5.3 Beta 5 - Remote Buffer Overflow (Metasploit)
$Id: racer503beta5.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
FreeBSD Ports: drupal5
The remote host is missing an update to the system as announced in the referenced advisory. VID 751823d4-f189-11de-9344-00248c9b4be7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 751823d4-f189-11de-9344-00248c9b4be7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-4370
CVE-2009-4370 affects Drupal Core 6.x up to 6.14/6.15 via the Menu module (menu.admin.inc). An XSS flaw allows authenticated users with permission to create new menus to inject arbitrary HTML/script through a menu description, which is not properly sanitized in the menu administration overview. I...
CVE-2009-4370
Cross-site scripting XSS vulnerability in the Menu module modules/menu/menu.admin.inc in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu...
Racer v0.5.3 beta 5 Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Racer v0.5.3...
Racer v0.5.3 Beta 5 Buffer Overflow
This module exploits the Racer Car and Racing Simulator game versions v0.5.3 beta 5 and earlier. Both the client and server listen on UDP port 26000. By sending an overly long buffer we are able to execute arbitrary code remotely. This module requires Metasploit: https://metasploit.com/download...
CVE-2007-4370
creationtimestamp| type| source ---|---|--- 2009-03-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8253 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16694 2018-05-29 15:50:33+00:00| seen|...
CVE-2008-4370
Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...
CVE-2008-4370
Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...
CVE-2008-4370
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6411...
F5 BIG-IP Web Management Version Detection
Binary data 4370.prm...
CVE-2007-4370
CVE-2007-4370 describes multiple buffer overflows in Racer 0.5.3 beta 5 that affect both the client and server. An attacker can trigger via a long UDP payload to port 26000, potentially allowing remote arbitrary code execution. Connected sources show public exploit activity (Metasploit/Exploit-DB...