6672 matches found
CVE-2009-1731
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie...
CVE-2009-1731
The provided documents contain concrete details for CVE-2009-1731: MLFFAT 2.1 is affected, specifically the panel/index.php component. The vulnerability is an SQL injection caused by processing a base64-encoded supervisor cookie, enabling remote attackers to execute arbitrary SQL commands. Impact...
PHP Base64 Encoder
This encoder returns a base64 string encapsulated in evalbase64decode, increasing the size by a bit more than one third. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PHP Base64 Encoder',...
Fedora Core 10 FEDORA-2009-2657 (glib2)
The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2657. OpenVAS Vulnerability Test $Id: fcore20092657.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2657 glib2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 10 FEDORA-2009-2657 (glib2)
The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2657. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
SUSE: Security Advisory for glib2 (SUSE-SA:2009:026)
The remote host is missing updates announced in advisory SUSE-SA:2009:026. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow
Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Usage : belkin.py victimeip Bug : Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit Credits go to : Elazar Broad Tested on : Xp sp3 ENVB Exploited...
Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow
!/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Usage : belkin.py victimeip Bug : Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit Credits go to : Elazar Broad Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends & muslims HaCkErs...
openSUSE 10 Security Update : glib2 (glib2-6209)
Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code CVE-2008-4316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
Ubuntu 6.06 LTS / 7.10 : libsoup vulnerability (USN-737-1)
It was discovered that the Base64 encoding functions in libsoup did not properly handle large strings. If a user were tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the precedi...
Ubuntu 7.10 / 8.04 LTS / 8.10 : glib2.0 vulnerability (USN-738-1)
Diego Petteno discovered that the Base64 encoding functions in GLib did not properly handle large strings. If a user or automated system were tricked into processing a crafted Base64 string, an attacker could possibly execute arbitrary code with the privileges of the user invoking the program. No...
Ubuntu 6.06 LTS / 7.10 : evolution-data-server vulnerability (USN-733-1)
It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings. If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user...
Ubuntu 8.10 : gst-plugins-base0.10 vulnerability (USN-735-1)
It was discovered that the Base64 decoding functions in GStreamer Base Plugins did not properly handle large images in Vorbis file tags. If a user were tricked into opening a specially crafted Vorbis file, an attacker could possibly execute arbitrary code with user privileges. Note that Tenable...
Mandriva Linux Security Advisory : evolution-data-server (MDVSA-2009:078)
A wrong handling of signed Secure/Multipurpose Internet Mail Extensions S/MIME e-mail messages enables attackers to spoof its signatures by modifying the latter copy CVE-2009-0547. Crafted authentication challange packets NT Lan Manager type 2 sent by a malicious remote mail server enables remote...
FreeBSD : Multiple Potential Buffer Overruns in Samba (2de14f7a-dad9-11d8-b59a-00061bc2ad93)
Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the 'mangling...
Mandriva Linux Security Advisory : glib2.0 (MDVSA-2009:080)
Multiple integer overflows in GLib's Base64 encoding and decoding functions enable attackers possibly remote ones, depending on the applications glib2 is linked against with - mostly GNOME ones either to cause denial of service and to execute arbitrary code via an untrusted input CVE-2008-4316...
Mandriva Linux Security Advisory : libsoup (MDVSA-2009:081)
An integer overflow in libsoup Base64 encoding and decoding functions enables attackers either to cause denial of service and to execute arbitrary code CVE-2009-0585. This update provides the fix for that security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
shopex4. 7. 2 The use of the program-vulnerability warning-the black bar safety net
by nameless I am nameless, and this time write a shopex4. 7. 2 vulnerability Has been notified of the official, today it is issued to, First syssite/shopadmin/orderservice. php background this document does not verify the identity of the user, It is important$vid parameter is not filtered...
cyrus-sasl -- buffer overflow vulnerability
US-CERT reports: The saslencode64 function converts a string into base64. The Cyrus SASL library contains buffer overflows that occur because of unsafe use of the saslencode64 function...
gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()
Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...