Design/Logic Flaw

The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values...

[SECURITY] Fedora 8 Update: Miro-1.0-2.fc8

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

[SECURITY] Fedora 7 Update: Miro-1.0-2.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

CVE-2007-6141

Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2007-6141

The CVE-2007-6141 entry documents a Cross-site scripting (XSS) vulnerability in vbTube.php of vBTube 1.1 Beta, where an attacker can inject arbitrary script/HTML via the search parameter. Affected component: vbTube.php in vBTube 1.1 Beta. Root cause: insufficient input sanitization on the search ...

CVE-2007-6141

Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...

vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable

-------------------------------------------------------------------------------------- title : vBTube v1.1 - Beta Vbulletin Tube Xss Vulnerable Author : CrackersChild [email protected] Exploit : vBTube.php?do=search&search=scriptalertdocument.cookie/script Dork : inurl:vBTube.php...

CVE-2007-5952

Cross-site scripting XSS vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5843

CVE-2007-5843 affects scWiki 1.0 Beta 2 with a PHP remote file inclusion in includes/common.php via the pathdot parameter, enabling remote code execution. Public exploit references exist (e.g., Exploit-DB), and Immunity CANVAS contains a scwiki_include module; no vendor patch details are provided...

CVE-2007-5843

PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in blockseditdo.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators...

CVE-2007-5818

Cross-site request forgery CSRF vulnerability in blockseditdo.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators...

scwiki-rfi.txt

scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell...

scWiki 1.0 Beta 2 (common.php pathdot) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vuln ================================================================= scWiki 1.0 Beta 2 common.php pathdot Remote...

scWiki 1.0 Beta 2 - common.php?pathdot Remote File Inclusion

scWiki 1.0 Beta 2 - common.php?pathdot Remote File Inclusion scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell milw0rm.com 2007-11-03...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5736

CVE-2007-5736 describes an Unrestricted file upload vulnerability in SeeBlick 1.0 Beta's upload.php. Attackers can upload arbitrary files via unspecified vectors; uploaded files are stored with .html extensions, which could limit impact to resource consumption and possibly XSS. The NVD entry supp...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

[SECURITY] Fedora 7 Update: Miro-0.9.8.1-4.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...