CVE-2009-2172

The CVE-2009-2172 entry concerns a Cross-Site Scripting (XSS) vulnerability in the vBulletin Radio and TV Player addon, specifically in forum/radioandtv.php. The vulnerability is triggered via the station parameter, allowing remote registered users to inject arbitrary web script or HTML. The prov...

vBulletin Radio and TV Player Add-On HTML Injection Vulnerability

No description provided by source. vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more info about this plugi...

vBulletin Radio and TV Player AddOn - HTML Injection

vBulletin Radio and TV Player AddOn - HTML Injection vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more inf...

vBulletin Radio and TV Player Add-On HTML Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vBulletin Radio and TV Player Add-On HTML Injection Vulnerability ================================================================= vBulletin Radio and TV Player Add-On all...

vBulletin Radio And TV Player Cross Site Scripting

vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more info about this plugin See -...

vBulletin Radio and TV Player AddOn - HTML Injection

vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more info about this plugin See -...

The Threatpost Daily News Wrap #1

In the first episode of the Threatpost Daily News Wrap podcast, Threatpost editors Ryan Naraine and Dennis Fisher discuss President Obama’s cybersecurity plan and the Microsoft DirectShow vulnerability. Download SHOW NOTES Microsoft warns of dangerous DirectShow flaw, attacks New cybersecurity cz...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to 'ConvertFile', an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit:...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

DSA-1764-1 tunapie - several vulnerabilities

Bulletin has no description...

Fedora Update for xastir FEDORA-2008-7541

Check for the Version of xastir OpenVAS Vulnerability Test Fedora Update for xastir FEDORA-2008-7541 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for xastir FEDORA-2008-7269

Check for the Version of xastir OpenVAS Vulnerability Test Fedora Update for xastir FEDORA-2008-7269 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Input validation

The tqslverifyDataBlock function in opensslcert.cpp in American Radio Relay League ARRL tqsllib 2.0 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a...

[SECURITY] Fedora 10 Update: tqsllib-2.0-5.fc10

The TrustedQSL library is used for generating digitally signed QSO records records of Amateur Radio contacts. This package contains the library and configuration files needed to run TrustedQSL applications...

Destiny Media Player .lst文件处理栈溢出漏洞

BUGTRAQ ID: 33100 Destiny Media Player是一款流行的音乐播放器，支持网络电台功能。 如果用户受骗使用Destiny Media Player打开了畸形的.lst文件的话，就可能触发栈溢出，导致执行任意指令。 Pirate Radio Destiny Media Player 1.61 厂商补丁： Pirate Radio ------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.pirateradio.com/downloads/...

Debian Security Advisory DSA 1668-1 (hf)

The remote host is missing an update to hf announced via advisory DSA 1668-1. OpenVAS Vulnerability Test $Id: deb16681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1668-1 hf Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1668-1 hf - execution of arbitrary code

Bulletin has no description...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues will allow an attacker to obtain...

Unfixed XSS vulnerability at www.absoluteradio.co.uk

Security researcher SaMTHG, has submitted on 30/10/2008 a cross-site-scripting XSS vulnerability affecting www.absoluteradio.co.uk, which at the time of submission ranked 34305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...