713 matches found
CVE-2010-1617
CVE-2010-1617 (Moodle) : A flaw in Moodle’s access check on user/view.php allows remote authenticated users to obtain the full names of other users via the course profile page. Affected: Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8. Exploitation context and impact are stated in multiple advi...
CVE-2009-4634
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that 1 bypasses a validation check in vorbisdec.c and triggers a wraparound of the stack pointer, or 2 access a pointer from out-of-bounds memory in...
acroread: multiple code execution flaws (APSB10-02)
Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPCMSRGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leadin...
SuSE 10 Security Update : openssl (ZYPP Patch Number 5949)
This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Buffer overflow
Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...
CVE-2009-3024
The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...
Ubuntu 8.04 LTS : firefox-3.0, xulrunner-1.9 regression (USN-645-3)
USN-645-1 fixed vulnerabilities in Firefox and xulrunner. The upstream patches introduced a regression in the saved password handling. While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database. This update fixes t...
DSA-1696-1 icedove - several vulnerabilities
Bulletin has no description...
USN-701-1: Thunderbird vulnerabilities
Several flaws were discovered in the browser engine. If a user had Javascript enabled, these problems could allow an attacker to crash Thunderbird and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Thunderbird could be...
ReVou Twitter Clone File Upload
--------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerability : wWw.BaTLaGH.CoM...
ReVou Twitter Clone Arbitrary File Upload Vulnerability
No description provided by source. --------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerabili...
ReVou Twitter Clone Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ======================================================= ReVou Twitter Clone Arbitrary File Upload Vulnerability ======================================================= --------------------------------------------------------- Portal Name:...
ReVou Twitter Clone - Arbitrary File Upload
--------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerability : wWw.BaTLaGH.CoM...
Mini File Host 1.x Arbitrary PHP File Upload Vulnerability
No description provided by source. --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability ...
Mini File Host 1.x Arbitrary PHP File Upload Vulnerability
Exploit for unknown platform in category web applications ========================================================== Mini File Host 1.x Arbitrary PHP File Upload Vulnerability ========================================================== --------------------------------------------------------- Port...
Mini File Host 1.x - Arbitrary .PHP File Upload
Mini File Host 1.x - Arbitrary .PHP File Upload --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected]...
Mini File Host 1.x - Arbitrary '.PHP' File Upload
--------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability : Uploader Bypass...
CVE-2008-3794
Integer signedness error in the mmsReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a...
MySQL Enterprise Server 5.0 < 5.0.60 MyISAM CREATE TABLE Privilege Check Bypass
The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.60. Such versions reportedly allow a local user to circumvent privileges through creation of MyISAM tables using the 'DATA DIRECTORY' and 'INDEX DIRECTORY' options to overwrite existing table files in the...