realplayer -- remote heap overflow

Two exploits have been identified in the Linux RealPlayer client. RealNetworks states: RealNetworks, Inc. has addressed recently discovered security vulnerabilities that offered the potential for an attacker to run arbitrary or malicious code on a customer's machine. RealNetworks has received no...

Winace UnAce 1.x - ACE Archive Directory Traversal

source: https://www.securityfocus.com/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace. The application fails to properly sanitize file and directory names contained within malicious ACE format archives. An attacker may leverage this issue b...

[VulnWatch] Secunia Research: Yahoo! Messenger File Transfer Filename Spoofing

====================================================================== Secunia Research 18/02/2005 - Yahoo! Messenger File Transfer Filename Spoofing - ====================================================================== Table of Contents Affected...

Microsoft Windows Drag-and-Drop vulnerability

It's possible to trick user to drag-n-drop malicious file into special for example autostart folder...

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12494/info Multiple remote vulnerabilities reportedly affect RealNetworks RealArcade. The first issue allows for arbitrary file deletion due to an input validation issue. The second issue is an...

NullSoft Winamp 5.0.x - Variant 'IN_CDDA.dll' Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/12381/info A remote buffer overflow vulnerability affects the INCDDA.dll library of Nullsoft's Winamp. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process...

iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability

Apple iTunes Playlist Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 01.13.05: http://www.idefense.com/application/poi/display?type=vulnerabilities January 13, 2005 I. BACKGROUND Apple iTunes is a digital jukebox capable of playing a variety of sound file formats, sharing music...

phpbb.ssh.D.txt

/usr/bin/perl ------------------------------------------------------------------------ Severino Honorato - /server irc.priv8crew.info Priv8crew - ssh.D.Worm use IO::Socket; use LWP::Simple; my $processo = "/usr/local/apache/bin/httpd -DSSL"; $SIG"INT" = "IGNORE"; $SIG"HUP" = "IGNORE"; $SIG"TERM" ...

XSA-2004-7: stack overflow in AIFF demultiplexer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-7 Summary: A stack buffer overflow vulnerability in the AIFF demultiplexer has been found by Ariel Berkman and was reported to the xine team by D. J. Bernstein. This can b...

PGN2WEB 0.3 - Remote Buffer Overflow

PGN2WEB 0.3 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/12023/info It is reported that pgn2web is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it into a...

GLSA-200412-10 : Vim, gVim: Vulnerable options in modelines

The remote host is affected by the vulnerability described in GLSA-200412-10 Vim, gVim: Vulnerable options in modelines Gentoo's Vim maintainer, Ciaran McCreesh, found several vulnerabilities related to the use of options in Vim modelines. Options like 'termcap', 'printdevice', 'titleold',...

Quicktime Multiple Integer Overflows (deprecated)

Binary data 2380.prm...

Yak! Chat Client 2.x - FTP Server Directory Traversal

Yak! Chat Client 2.x - FTP Server Directory Traversal source: https://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can...

Gadu-Gadu 6.0 - File Download Filename Obfuscation

Gadu-Gadu 6.0 - File Download Filename Obfuscation source: https://www.securityfocus.com/bid/11017/info Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems. It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attacke...

Gadu-Gadu 6.0 - File Download Filename Obfuscation

source: https://www.securityfocus.com/bid/11017/info Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems. It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attackers to obfuscate file extensions. This may allow an...

Mandrake Linux Security Advisory : kde3 (MDKSA-2003:049-1)

A vulnerability was discovered by the KDE team in the way that KDE uses Ghostscript for processing PostScript and PDF files. A malicious attacker could provide a carefully constructed PDF or PostScript file to an end user via web or mail that could lead to the execution of arbitrary commands as t...

Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion

/ source: https://www.securityfocus.com/bid/10746/info Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. If successful, the malicious script supplied by the...

Kietu 23 - index.php Remote File Inclusion

Kietu 23 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/9499/info A flaw exists in the Kietu 'index.php' script that may permit remote attackers to include malicious remote files. Remote users may influence the include path for the 'config.php' configuration file, whi...

Novell Netware Enterprise Web Server 5.1/6.0 SnoopServlet - Information Disclosure

source: https://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose sensitive information, and load potentially malicious files on a vulnerable...

Novell Netware Enterprise Web Server 5.16.0 - env.bas Information Disclosure

Novell Netware Enterprise Web Server 5.16.0 - env.bas Information Disclosure source: https://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose...