WordPress: Arbitrary command execution

Background WordPress is a PHP and MySQL based content management and publishing system. Description rgod discovered that WordPress insufficiently checks the format of cached username data. Impact An attacker could exploit this vulnerability to execute arbitrary commands by sending a specially...

RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)

NGSSoftware Insight Security Research Advisory Name: RealPlayer Arbitrary File Deletion Vulnerability Systems Affected: RealPlayer 10.5 6.0.12.1040 and older Severity: High Vendor URL: http://www.real.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January 2004 Adviso...