[SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability

Title : FeedDemon Buffer OverFlow Vulnerability 1. General Information FeedDemon is known as the most popular Windows RSS Reader which allows users to view and manage easily RSS feeds from their desktop. In January 2009, SVRT-BKIS detected a buffer overflow vulnerability in this software. Taking...

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

Apple Safari RSS Feed Information Disclosure Vulnerability

The host is running Apple Safari web browser which is prone to remote file access vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariinfodiscvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari RSS Feed Information Disclosure Vulnerability Authors: Nikita MR Copyright: Copyright c...

Apple Safari RSS Feed Information Disclosure Vulnerability

Apple Safari web browser is prone to remote file access vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Information disclosure

Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the association of Safari with the 1 feed, 2 feeds, and 3 feedsearch URL types for RSS feeds. NOTE: as of 20090114, the only disclosure...

CVE-2009-0123

Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the association of Safari with the 1 feed, 2 feeds, and 3 feedsearch URL types for RSS feeds. NOTE: as of 20090114, the only disclosure...

CVE-2009-0123

Apple Safari on Mac OS X 10.5 and Windows is affected by an information-disclosure vulnerability tied to RSS feed URL types (feed, feeds, feedsearch) that can allow remote attackers to read arbitrary files on a client. The associated OpenVAS/NVD entries label this as a RSS Feed Information Disclo...

USN-707-1: CUPS vulnerabilities

It was discovered that CUPS didn't properly handle adding a large number of RSS subscriptions. A local user could exploit this and cause CUPS to crash, leading to a denial of service. This issue only applied to Ubuntu 7.10, 8.04 LTS and 8.10. CVE-2008-5183 It was discovered that CUPS did not...

MagpieRSS XSS 0day

Hello, I have found a Cross Site Scripting vulnerability in MagpieRSS, an RSS parser written in PHP, basically, this piece of software enables users to add their own RSS feeds to be parsed, so they can keep up to date with their favourite feeds, as well as the pre-defined ones. I crafted my own R...

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

RSS Simple News (news.php pid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== RSS Simple News news.php pid Remote SQL Injection Exploit =========================================================== !/usr/bin/perl Coded by Piker D.O.M Team...

RSS Simple News - SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...

[SECURITY] Fedora 8 Update: evolution-rss-0.0.8-14.fc8

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 8 Update: blam-1.8.3-20.fc8

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-5.fc9

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 9 Update: blam-1.8.5-4.fc9.1

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-3.fc10

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 10 Update: blam-1.8.5-5.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

cups security update

1.2.4-11.18:.3 - Applied patch to fix RSS subscription limiting bug 473901, CVE-2008-5183...

WordPress wp-includes/feed.php self_link() Function Host Header RSS Feed XSS

The version of WordPress installed on the remote host fails to properly sanitize input to the 'Host' request header before using it in the 'selflink' function in 'wp-includes/feed.php' to generate dynamic HTML output. An attacker can leverage this issue to inject arbitrary HTML and script code in...