PeerCast: Buffer overflow

Background PeerCast is a client and server for P2P-radio network Description Luigi Auriemma reported a heap-based buffer overflow within the "handshakeHTTP" function when processing HTTP requests. Impact A remote attacker could send a specially crafted request to the vulnerable server, possibly...

Toshiba Surveillance - 'MeIpCamX.dll 1.0.0.4' Remote Buffer Overflow

///add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)

AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...

Mp3 ToolBox 1.0 beta 5 Remote File İnclude Vulnerability

+By CrackersChild+ Script.......: Mp3 ToolBox 1.0 beta 5 Download.....: http://www.radiotoolbox.com/downloads/mp3toolbox/mp3toolboxbeta-5.zip Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File nclude Vulnerability Dork.........: intitle:M...

Stack overflow

Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods...

AOL Radio AmpX Active X buffer overflow

Multiple buffer overflows in different methods...

AOL Radio AmpX ActiveX Control Buffer Overflow Vulnerabilities

The remote host contains the 'AmpX' ActiveX control, which is associated with AOL Radio. The version of this control installed on the remote host fails to validate input to several methods before copying it into a finite- sized buffer using 'strcpy'. In addition, it allows remote access to the...

Remote file inclusion

PHP remote file inclusion vulnerability in NewsCMS/news/newstopicinc.php in North Country Public Radio Public Media Manager PMM 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter...

CVE-2007-5149

PHP remote file inclusion vulnerability in NewsCMS/news/newstopicinc.php in North Country Public Radio Public Media Manager PMM 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter...

CVE-2007-5149

PHP remote file inclusion vulnerability in NewsCMS/news/newstopicinc.php in North Country Public Radio Public Media Manager PMM 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter...

CVE-2007-5149

The CVE-2007-5149 entry describes a PHP remote file inclusion vulnerability in NewsCMS/Public Media Manager (PMM) 1.3, specifically in NewsCMS/news/newstopic_inc.php where an attacker can cause arbitrary PHP code execution through a URL supplied in the indir parameter. The affected component is t...

CVE-2007-4923

CVE-2007-4923: Joomla Radio 5 (com_joomlaradiov5) on Joomla! is affected by a PHP Remote File Inclusion in admin.joomlaradiov5.php. The vulnerability allows an attacker to execute arbitrary PHP code by manipulating the mosConfig_live_site URL parameter. The connected documents confirm the vulnera...

joomlaradio-rfi.txt

Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...

Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...

Unfixed XSS vulnerability at radio.xmlstoragesystem.com

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting radio.xmlstoragesystem.com, which at the time of submission ranked 15880 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. ...

Memory corruption

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 is affected by CVE-2007-1008 where a crafted XML list of radio stations can cause a denial of service via memory corruption. The issue is user‑assisted remote in nature and relies on the XML document being retrieved from a static URL, which implies an attacker must perform DNS ...

iTunes remote memory corruption vulnerability

Hi, iTunes for both macosx and win is prone to a remote memory corruption vulnerability when parsing xml. iTunes will parse xml when it contacts a touning server which will return the list of radio channels in that format. To trigger this bug is sufficent to send to iTunes an xml file containing...

XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...