10771 matches found
Adobe Flash Player 10.0.22 / AIR - URI Parsing Heap Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/35902/info Adobe Flash Player and Adobe AIR are prone to a heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition. This...
VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow
/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...
Google Chrome 'chrome://history/' URI跨站脚本漏洞
Bugraq ID: 35841 Google Chrome是一款流行的WEB浏览器。 Google Chrome处理特殊构建的URI缺少充分过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 构建如下的URI，诱使用户访问，可获得目标用户敏感信息： chrome://history/q=%22%3E%3Cmarquee%3E%3Ch1%3Ebikolinux%3C%2Fh1%3E%3C%2 Fmarquee%3E view-source:chrome://history/q="marqueeh1bikolinux/h1/marquee...
Google Chrome 'About:blank'地址栏URI伪造漏洞
Bugraq ID: 35839 CNCAN ID：CNCAN-2009072908 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在URL伪造问题，远程攻击者可以利用漏洞使目标用户盲目信任页面，泄漏敏感信息。 通过"window.open"调用包含"%20"等特殊字符的域时，可导致在子窗口的地址栏中显示任意URL，使用户盲目信任，可能导致泄漏敏感信息。 Google Chrome 2.0.172 37 Google Chrome 2.0.172 33 Google Chrome 2.0.172 31 Google Chrome 2.0.172 30...
Allomani Mobile 2.5 Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Mobile v2.5 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qabandi \QQQQ...
Mozilla Firefox出错页面地址栏URI欺骗漏洞
BUGTRAQ ID: 35803 Firefox是Mozilla所发布的开源WEB浏览器。 如果用户受骗使用Firefox打开了包含有无效字符（如“,”或“%”）的特制URL的话，所生成出错页面的地址栏中可能会显示欺骗性的URL。这可能给用户造成误导，有助于攻击者执行网络钓鱼类的欺骗攻击。 Mozilla Firefox 3.0.11 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/ /script center h1Firefox...
CVE-2009-2571
Multiple cross-site scripting XSS vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the URI, 2 the q parameter, 3 the nick parameter, or 4 the nick parameter in a bantest action...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-509)
The Mozilla Firefox browser is updated to version 3.0.6 fixing various security and stability issues. MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-125)
This update brings Mozilla Firefox to version 3.0.1. It fixes various bugs and also following security problems : MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerabili...
apr-util heap buffer underwrite
The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...
CVE-2009-2484
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...
Stack overflow
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...
CVE-2009-2484
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...
CVE-2009-2484
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...
CVE-2009-2484
CVE-2009-2484 affects VideoLAN VLC Media Player on Windows. It is a stack-based buffer overflow in the Win32AddConnection function (modules/access/smb.c) that can be triggered by a long smb:// URI in a playlist, potentially allowing remote code execution or a crash. Affected versions are VLC 0.9....
CVE-2009-2484
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...
CVE-2009-2351
CVE-2009-1312 is referenced in MiracleLinux AXSA advisories as a vulnerability in Mozilla Firefox and SeaMonkey where javascript: URIs in Refresh headers in HTTP responses were not blocked. Affected versions include Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17; this could enable cross...
CVE-2009-2305
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ slash slash dot backslash sequences...