ooVoo messenger and videochat agent buffer overflow

Buffer overflow on oovoo: URI parsing...

Microsoft iExplorer ' ' Address Bar URI Spoofing Vulnerability

Microsoft Internet Explorer is prone to an URI spoofing vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft iExplorer ' ' Address Bar URI Spoofing Vulnerability

This host is installed with Microsoft Internet Explorer and is prone to an URI spoofing vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiexplorerurispoofvuln900170.nasl 8957 2018-02-26 14:41:13Z asteins $ Description: Microsoft iExplorer '' Address Bar URI Spoofing Vulnerability Authors:...

Microsoft Internet Explorer ' '地址栏URI伪造漏洞

BUGTRAQ ID: 31960 CNCAN ID：CNCAN-2008102905 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Microsoft Internet Explorer处理非中断空格字符'NBSP;'组合存在问题，远程攻击者可以利用漏洞进行URI伪造攻击。 使用非中断空格字符NBSP, Unicode U+00A0可进行钓鱼攻击，这个字符在地址栏中被渲染为空格NBSP在所有单字节字符集代码页中映射为0xA0，如Windows-1250...Windows-1258...

SFS EZ Gaming Directory - 'cat_id' SQL Injection

Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Gaming Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=112 D0rk : "sie go. amk iÅŸinizmi yok xD" SQL...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in a blocked-site error page. An attacker may leverage this iss...

SiteEngine 5.x Multiple Remote Vulnerabilities

Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $id requireonce $siteengineroot."lib/rss.php" ; $sql = "SELECT url FROM...

[ MDVSA-2008:218 ] lynx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:218 http://www.mandriva.com/security/ Package : lynx Date : October 28, 2008 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A vulnerability was found in the Lynxcgi: URI handler that could allow an...

KVIrc URI处理器远程格式串处理漏洞

BUGTRAQ ID: 31912 KVIrc是基于Qt GUI工具包的免费可移植IRC客户端。 KVIrc在处理URI时存在格式串漏洞，如果将KVIrc设置为默认的IRC URI处理器的话，则用户受骗跟随了特制的irc:// URI就会导致执行任意指令。 KVIrc 3.4.0 KVIrc ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kvirc.net/ html titleKVIrc v3.4.0 Virgo Remote Format String Exploit PoC/Title head...

RHEL 2.1 / 3 / 4 / 5 : lynx (RHSA-2008:0965)

An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...

lynx security update

CentOS Errata and Security Advisory CESA-2008:0965 An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based W...

Format string

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

KVirc 3.4.0 is affected by a format-string vulnerability in the URI handler when KVirc is set as the default application for processing irc:// URIs. The flaw allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via format specifiers in t...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

Important: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...

Microsoft Internet Explorer 6 - ' ' Address Bar URI Spoofing

source: https://www.securityfocus.com/bid/31960/info Internet Explorer is affected by a URI-spoofing vulnerability because it fails to adequately handle specific combinations of the non-breaking space character ''. An attacker may leverage this issue to spoof the source URI of a site presented to...

e107 Plugin EasyShop - category_id Blind SQL Injection

e107 Plugin EasyShop - categoryid Blind SQL Injection !/usr/bin/perl ------------------------------------------------------------ e107 Plugin EasyShop Remote Blind SQL Injection Exploit By StAkeRathotmaildotit Dork allinurl: e107plugins/easyshop/easyshop.php Example http://www.clan-designs.co.uk...

Microsoft Internet Explorer 6 - NBSP; Address Bar URI Spoofing

Microsoft Internet Explorer 6 - NBSP; Address Bar URI Spoofing source: https://www.securityfocus.com/bid/31960/info Internet Explorer is affected by a URI-spoofing vulnerability because it fails to adequately handle specific combinations of the non-breaking space character ''. An attacker may...

HTTP NIDS evasion

This plugin configures OpenVAS for NIDS evasion see the SPDX-FileCopyrightText: 2008 Michel Arboi / Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only The HTTP IDS evasion...