1566 matches found
CVE-2007-0242
Removed by vendor...
Mandrake Linux Security Advisory : php (MDKSA-2006:196)
The Hardened-PHP Project discovered buffer overflows in htmlentities/htmlspecialchars internal routines to the PHP Project. The purpose of these functions is to be filled with user input. The overflow can only be when UTF-8 is used CVE-2006-5465 Unspecified vulnerabilities in PHP, probably before...
WordPress wp-trackback. php vulnerability analysis-vulnerability warning-the black bar safety net
WordPress wp-trackback. php vulnerability analysis Text/Superhei 2007/1/9 1. Stefan Esser, a large cattle 2 0 0 7/0 1/0 5 publish a WordPress Trackback Charset Decoding SQL Injection Vulnerability 1 Code:wp-trackback.php $tburl = $POST'url'; $title = $POST'title'; $excerpt = $POST'excerpt';...
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC
No description provided by source. ?php / Zarathu / / www.whitepaperclip.com / //instantiate a string $str1 = ""; for$i=0; $i 64; $i++ $str1 .= toUTF977; //MUST start with 977 before bit-shifting htmlentities$str1, ENTNOQUOTES, "UTF-8"; //DoS here / htmlentities method automatically assumes it is...
PHP 4.4.45.1.6 - htmlentities() Local Buffer Overflow (PoC)
PHP 4.4.45.1.6 - htmlentities Local Buffer Overflow PoC 6 + 192 . chr$x & 63 + 128; ? milw0rm.com 2006-11-27...
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC
Exploit for multiple platform in category dos / poc =========================================================== PHP 6 + 192 . chr$x & 63 + 128; ? 0day.today 2018-01-30...
PHP 4.4.4/5.1.6 - 'htmlentities()' Local Buffer Overflow (PoC)
6 + 192 . chr$x & 63 + 128; ? milw0rm.com 2006-11-27...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix a security issue are now available for the Red Hat Application Stack. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The...
php security update
CentOS Errata and Security Advisory CESA-2006:0730 Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The Hardened-PHP Project discovered an...
Debian DSA-1202-1 : screen - programming error
'cstone' and Rich Felker discovered that specially crafted UTF-8 sequences may lead an out of bands memory write when displayed inside the screen terminal multiplexer, allowing denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
GLSA-200611-01 : Screen: UTF-8 character handling vulnerability
The remote host is affected by the vulnerability described in GLSA-200611-01 Screen: UTF-8 character handling vulnerability cstone and Richard Felker discovered a flaw in Screen's UTF-8 combining character handling. Impact : The vulnerability can be exploited by writing a special string of...
[slackware-security] screen
New screen packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-4573 Here are the details from the Slackware 11....
CVE-2006-5465
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the 1 htmlentities or 2 htmlspecialchars functions...
CVE-2006-5465
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the 1 htmlentities or 2 htmlspecialchars functions...
Screen: UTF-8 character handling vulnerability
Background Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells. Description cstone and Richard Felker discovered a flaw in Screen's UTF-8 combining character handling. Impact The vulnerability can be exploited by...
PHP functions buffer overflow
Buffer overflow in htmlentities and htmlspecialchars on UTF-8 encoding...
[SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1202-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 31st, 2006 http://www.debian.org/security/faq -...
DSA-1202-1 screen - programming error
Bulletin has no description...
FreeBSD : screen -- combined UTF-8 characters vulnerability (b318dc8c-6756-11db-83c3-000c6ec775d9)
A vulnerability in the handling of combined UTF-8 characters in screen may allow an user-assisted attacker to crash screen or potentially allow code execution as the user running screen. To exploit this issue the user running scren must in some way interact with the attacker. %NASLMINLEVEL 70300 ...