1245 matches found
Winamp < 5.552 Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow
The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.552. Such versions are reportedly affected by an integer overflow vulnerability when processing '.maki' files. An attacker could exploit this to execute arbitrary co...
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB:...
SMA-DB 0.3.13 Remote File Inclusion
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB: Written in PHP4: SMA-DB is a Databa...
SMA-DB 0.3.13 - Multiple Remote File Inclusions
SMA-DB 0.3.13 - Multiple Remote File Inclusions SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip -...
SMA-DB 0.3.13 - Multiple Remote File Inclusions
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB: Written in PHP4: SMA-DB is a Databa...
Google launching members-only security forum
internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...
Unfixed XSS vulnerability at www.modern-empires.com
Security researcher PaPPy, has submitted on 27/12/2008 a cross-site-scripting XSS vulnerability affecting www.modern-empires.com, which at the time of submission ranked 11044603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2009. It is...
Unfixed XSS vulnerability at blog.modernmechanix.com
Security researcher Pragmatk, has submitted on 11/08/2008 a cross-site-scripting XSS vulnerability affecting blog.modernmechanix.com, which at the time of submission ranked 41378 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...
Double Denial of Service in Call of Duty 4 1.6
Luigi Auriemma Application: Call of Duty 4: Modern Warfare http://www.callofduty.com Versions: = 1.6 Platforms: Windows tested and Linux Bugs: A "Attempted to overrun string in call to va" DoS B "callvote map" Denial of Service Exploitation: remote, versus server in-game Date: 22 Jun 2008 Author:...
Unfixed XSS vulnerability at modern-empires.ej.am
Security researcher PaPPy, has submitted on 14/06/2008 a cross-site-scripting XSS vulnerability affecting modern-empires.ej.am, which at the time of submission ranked 64736 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/06/2008. It is...
Denial of Service in Call of Duty 4 1.5
Luigi Auriemma Application: Call of Duty 4: Modern Warfare http://www.callofduty.com Versions: = 1.5 Platforms: Windows tested and Linux Bug: Denial of Service Exploitation: remote, versus server in-game Date: 02 May 2008 Thanx to: Chronos for the additional tests Author: Luigi Auriemma e-mail:...
advisory-singapore-modern-template.txt
Singapore Modern Template v1.3.2 pageTitle.'" href="'.$SERVER"PHPSELF"; if isset$GET"gallery" echo '?gallery='.$GET"gallery"; echo '&template=rss" / Input passed to the "gallery" parameter is not properly santised. Therefore the following request would result in a XSS flaw:...
Singapore 0.10.1 Modern Template - 'gallery' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27382/info singapore Modern template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Singapore 0.10.1 Modern Template - gallery Cross-Site Scripting
Singapore 0.10.1 Modern Template - gallery Cross-Site Scripting source: https://www.securityfocus.com/bid/27382/info singapore Modern template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this iss...
Destroy TCP/IP-vulnerabilities and early warning-the black bar safety net
The use of a TCP/IP Protocol software vulnerabilities to attack the classic example is the Ping of Death attack. The use of a specific method is,your opponent create a exceeds the IP Standard's maximum length--6 5 5 3 5 bytes of the IP packet. When this"puffy"data packet arrival time,it makes the...
Уязвимость системы CRYPTOCard
В системах CRYPTOAdmin/CRYPTOCard используется 8-разрядный PIN-код. 100000000 вариантов можно перебрать методом "грубой силы" менее чем за 5 минут на современных вычислительных системах...
Security update 1970-01-01
...
Security update 1970-01-01
...