vBulletin Radio and TV Player Add-On HTML Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vBulletin Radio and TV Player Add-On HTML Injection Vulnerability ================================================================= vBulletin Radio and TV Player Add-On all...

vBulletin Radio and TV Player AddOn - HTML Injection

vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more info about this plugin See -...

The Threatpost Daily News Wrap #1

In the first episode of the Threatpost Daily News Wrap podcast, Threatpost editors Ryan Naraine and Dennis Fisher discuss President Obama’s cybersecurity plan and the Microsoft DirectShow vulnerability. Download SHOW NOTES Microsoft warns of dangerous DirectShow flaw, attacks New cybersecurity cz...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to 'ConvertFile', an attacker can overrun a buffer and execute arbitrary code. Module Options msf use...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

DSA-1764-1 tunapie - several vulnerabilities

Bulletin has no description...

CVE-2008-6395: Use of Externally-Controlled Format String

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Fedora Update for xastir FEDORA-2008-7541

Check for the Version of xastir OpenVAS Vulnerability Test Fedora Update for xastir FEDORA-2008-7541 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for xastir FEDORA-2008-7269

Check for the Version of xastir OpenVAS Vulnerability Test Fedora Update for xastir FEDORA-2008-7269 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Input validation

The tqslverifyDataBlock function in opensslcert.cpp in American Radio Relay League ARRL tqsllib 2.0 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a...

[SECURITY] Fedora 10 Update: tqsllib-2.0-5.fc10

The TrustedQSL library is used for generating digitally signed QSO records records of Amateur Radio contacts. This package contains the library and configuration files needed to run TrustedQSL applications...

Destiny Media Player .lst文件处理栈溢出漏洞

BUGTRAQ ID: 33100 Destiny Media Player是一款流行的音乐播放器，支持网络电台功能。 如果用户受骗使用Destiny Media Player打开了畸形的.lst文件的话，就可能触发栈溢出，导致执行任意指令。 Pirate Radio Destiny Media Player 1.61 厂商补丁： Pirate Radio ------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.pirateradio.com/downloads/...

Debian Security Advisory DSA 1668-1 (hf)

The remote host is missing an update to hf announced via advisory DSA 1668-1. OpenVAS Vulnerability Test $Id: deb16681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1668-1 hf Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1668-1 hf - execution of arbitrary code

Bulletin has no description...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues will allow an attacker to obtain...

Unfixed XSS vulnerability at www.absoluteradio.co.uk

Security researcher SaMTHG, has submitted on 30/10/2008 a cross-site-scripting XSS vulnerability affecting www.absoluteradio.co.uk, which at the time of submission ranked 34305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

[SECURITY] Fedora 9 Update: xastir-1.9.2-9.fc9

Xastir is a graphical application that interfaces HAM radio and internet access to realtime mapping software. Install XASTIR if you are interested in APRStm and HAM radio software...

[SECURITY] Fedora 8 Update: xastir-1.9.2-8.fc8

Xastir is a graphical application that interfaces HAM radio and internet access to realtime mapping software. Install XASTIR if you are interested in APRStm and HAM radio software...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE HTTP POST请求拒绝服务漏洞

BUGTRAQ ID: 30988 CNCAN ID：CNCAN-2008090401 3Com Wireless 8760 Dual Radio 11a/b/g PoE是一款企业级网线访问接入点设备。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE WEB接口处理HTTP POST请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 WEB管理接口不正确处理畸形HTTP POST请求，可导致应用程序崩溃，造成拒绝服务攻击。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE 目前没有解决方案提供：...