CVE-2009-1434

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

CVE-2009-1408

Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...

CVE-2009-1408

Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...

Mandriva Linux Security Advisory : qemu (MDVSA-2009:008)

Security vulnerabilities have been discovered and corrected in VNC server of qemu version 0.9.1 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to preve...

Stack overflow

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted 1 CCD or 2 IMG file...

CVE-2009-1260

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted 1 CCD or 2 IMG file...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2008-6612

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

UltraISO <= 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================ UltraISO = 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit ================================================================ !/usr/bin/perl UltraISO = 9.3.3.2685 CCD/IMG...

UltraISO 9.3.3.2685 - CCDIMG Universal Buffer Overflow

UltraISO 9.3.3.2685 - CCDIMG Universal Buffer Overflow !/usr/bin/perl UltraISO = 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit ---------------------------------------------------------------- Discovered and Exploited by SkD [email protected] A nice exploit for this software that was just...

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

!/usr/bin/perl UltraISO = 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit ---------------------------------------------------------------- Discovered and Exploited by SkD [email protected] A nice exploit for this software that was just recently patched after a few other discoveries in it...

UltraISO CCD/IMG Buffer Overflow

!/usr/bin/perl UltraISO = 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit ---------------------------------------------------------------- Discovered and Exploited by SkD [email protected] A nice exploit for this software that was just recently patched after a few other discoveries in it...

Debian Security Advisory DSA 1743-1 (libtk-img)

The remote host is missing an update to libtk-img announced via advisory DSA 1743-1. OpenVAS Vulnerability Test $Id: deb17431.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1743-1 libtk-img Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1743-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1743-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1743-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 17, 2009 http://www.debian.org/security/faq -...

Debian DSA-1743-1 : libtk-img - buffer overflows

Two buffer overflows have been found in the GIF image parsing code of Tk, a cross-platform graphical toolkit, which could lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5137 It was discovered that libtk-img ...

DSA-1743-1 libtk-img - arbitrary code execution

Bulletin has no description...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities

No description provided by source. +---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat -...

woltlab burning board 3.0.x - Multiple Vulnerabilities

+---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat - stakerathotmaildotit | | thanks to s3rg3770 |...