Microsoft Internet Explorer Unspecified ActiveX Image Control Vulnerability

Description Microsoft has announced in the MS05-014 Cumulative Internet Explorer bulletin that the ActiveX Image Control 1.0 is no longer supported due to an unspecified security vulnerability. The cumulative update addresses the vulnerability by setting the kill-bit on the control so that it may...

Portcullis Security Advisory 05-007

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Password Policy Implemented At Client rather than Server Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application...

Xine-Lib < 1.0-rc8 Remote Client-Side Buffer Overflow

Binary data 2459.prm...

XLReader 0.9 - Remote Client-Side Buffer Overflow

XLReader 0.9 - Remote Client-Side Buffer Overflow source: https://www.securityfocus.com/bid/11970/info A remote, client-side buffer overflow vulnerability affects xlreader. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying...

MPlayer < 1.0pre5try2 Get_Header Remote Client-Side Buffer Overflow

Binary data 2458.prm...

MPlayer 0.91.0 - MMST Get_Header Remote Client-Side Buffer Overflow

MPlayer 0.91.0 - MMST GetHeader Remote Client-Side Buffer Overflow // source: https://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of...

MPlayer 0.9/1.0 - MMST Get_Header Remote Client-Side Buffer Overflow

// source: https://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static process buffers. An...

MPG123 0.59 - Find Next File Remote Client-Side Buffer Overflow

source: https://www.securityfocus.com/bid/11958/info A remote client-side buffer overflow vulnerability affects mpg123. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static process buffers. An attacker may...

Prozilla 1.3.6 - Remote Stack Overflow

Prozilla 1.3.6 - Remote Stack Overflow / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/sus...

Google Desktop Search - Cross-Site Scripting

Google Desktop Search - Cross-Site Scripting source: https://www.securityfocus.com/bid/11541/info Google Desktop Search is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize HTML tag content. An attacker may leverage...

Google Desktop Search - Cross-Site Scripting

source: https://www.securityfocus.com/bid/11541/info Google Desktop Search is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize HTML tag content. An attacker may leverage this issue to execute arbitrary client-side...

Business Objects WebIntelligence protection bypass

Access control is implemented on the client-side by only displaying the permitted actions in the browser...

&RQ DoS bug

===RUS При длинном запросе на авторизацию старого образца &RQ любой версии выдает много ошибок, в некоторых случаях требуется переустановка клиента. После разговора с Rejetto, он прислал файл конфигурации, который закрывает эту брешь. icq 7000000 [email protected] с уважением, RdM-YanDeX ===ENG...

PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities

///////////////////////////////////////////////////////////////////// //=================== Security Advisory =======================// ///////////////////////////////////////////////////////////////////// --------------------------------------------------------------------- --- PhpBB HTTP Respon...

US Robotics Broadband Router 8003 unauthorized access

Password is checked on client side...

Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001

-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...

Cross Site Scripting in VBulletin forum software

Client side execution of malicious scripts cross-site scripting Test Impact Customer session and cookies may be compromised. The attacker may be able to pose as a legitimate user to view and alter user records, and perform transactions as that user. From the polarised perspective, a user may only...

Epic 1.0.1/1.0.x - CTCP Nickname Server Message Buffer Overrun

// source: https://www.securityfocus.com/bid/8999/info A remotely exploitable buffer overrun has been reported in Epic. This issue may reportedly be exploited by a malicious server that supplies an overly long nickname in a CTCP messages, potentially allowing for execution of arbitrary code in th...

mpg123[v0.59r,v0.59s]: remote client-side heap corruption exploit.

did an audit of mpg123my mp3 player of choice, found a remotely exploitable bug in audio streaming servicehttpget.c; applies to v0.59r and v0.59spre, up to current as of writing this. the exploit comments explain how it works and how to find the memory addresses neededif not already a target valu...

PBLang Forum XSS Vul

PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...