5680 matches found
mpg123[v0.59r,v0.59s]: remote client-side heap corruption exploit.
did an audit of mpg123my mp3 player of choice, found a remotely exploitable bug in audio streaming servicehttpget.c; applies to v0.59r and v0.59spre, up to current as of writing this. the exploit comments explain how it works and how to find the memory addresses neededif not already a target valu...
PBLang Forum XSS Vul
PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...
cPanel Malicious HTML Tags Injection Vulnerability
------------------------------------------------------------------------------- ----- cPanel Malicious HTML Tags Injection Vulnerability ------------------------------------------------------------------------------- -- Author: Ory Segal, Sanctum inc. http://www.SanctumInc.com -- Discovery Date:...
WebBBS Guestbook : Cross Site Scripting
WebBBS Guestbook : Cross Site Scripting Program : WebBBS Url vendor : http://awsd.com/scripts/webbbs/ Problem : Multiple Cross Site Scripting Vulnerabilities Author : Thierry LAVIE [email protected] Www : www.lavieangel.com DESCRIPTION : WebBBS is, as the name implies, a Web-based bulletin...
IBM Tivoli Firewall Security Toolbox buffer overflow
Buffer overflow from client side...
shopfactory shopping cart
Security advisory Issue: Shopfactory e-commerce application allows alteration of order details Date: 03/05/03 Vendor first notified: December 2002 Affected versions: All available versions current version Shopfactory 5.8 ABOUT SHOPFACTORY: Shopfactory is a shopping cart solution. According to the...
CVE-2002-2303
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...
Poisonous Style for Dialog window turns the zone off.
Poisonous Style for Dialog window turns the zone off. "that's all" is the end of file if you are in a hurry tested MSIEv6CN version Patch: Q312461,Q328790MS02-066 IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...
Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting
Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...
Working Resources BadBlue 1.7.3 - 'cleanSearchString()' Cross-Site Scripting
source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web interface, generated by an included web server running on the local...
Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C)
Affected products : All versions of Checkpoint FW1 when used with SecuRemote/SecureClient Namely 4.0, 4.1 at any SP level, and NG FP1 http://www.checkpoint.com/products/security/vpn-1clients.html Description : Checkpoint Firewall-1 SecuRemote/SecureClient "authentication timeout" defined in FW1's...
tdforum 1.2 Messageboard
Examination of the program "TDForum 1.2", a guest book style, unthreaded messageboard, for sale at http://www.tdscripts.com http://www.tdavidscripts.com/ aliases the same, revealed a serious client-side security risk to the users of the forum. Because user supplied data is not being sanitized,...
FreeBSD-SA-00:72.curl
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:72 Security Advisory FreeBSD, Inc. Topic: curl client-side vulnerability Category: ports Module: curl Announced: 2000-11-20 Credits: Wichert Akkerman Affects: Ports...
Weblogic 3.1.8/4.0.4/4.5.1 - Remote Command Execution
source: https://www.securityfocus.com/bid/1525/info In February of 2000 CERT Coordination Center released an advisory titled "Malicious HTML Tags Embedded in Client Web Requests" advisory attached in 'Credit' section". This advisory was a joint release by the CERT Coordination Center, DoD-CERT, t...
Weblogic 3.1.84.0.44.5.1 - Remote Command Execution
Weblogic 3.1.84.0.44.5.1 - Remote Command Execution source: https://www.securityfocus.com/bid/1525/info In February of 2000 CERT Coordination Center released an advisory titled "Malicious HTML Tags Embedded in Client Web Requests" advisory attached in 'Credit' section". This advisory was a joint...
FreeBSD-SA-00:32.bitchx
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:32 Security Advisory FreeBSD, Inc. Topic: bitchx port contains client-side vulnerability Category: ports Module: bitchx Announced: 2000-07-05 Affects: Ports collection...
Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect
Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: https://www.securityfocus.com/bid/766/info...
Microsoft Internet Explorer 4/5 / Outlook 98 - 'window.open' Redirect
Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: https://www.securityfocus.com/bid/766/info If window.open is called with a target URL that redirects to a...
