642 matches found
Elecard MPEG Player Buffer Overflow Vulnerability
Elecard MPEG Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TBmnetCMS 1.0 - Local File Inclusion
------------------------------------------------------------------------------------------------------------- TBmnetCMS v1.0 index.php?content Local File Inclusion Vulnerability http://www.tbmnet.de...
Newsbeuter: User-assisted execution of arbitrary code
Background Newsbeuter is a RSS/Atom feed reader for the text console. Description J.H.M. Dassen reported that the open-in-browser command does not properly escape shell metacharacters in the URL before passing it to system. Impact A remote attacker could entice a user to open a feed with speciall...
mplayer -- multiple vulnerabilities
The remote host is missing an update to the system as announced in the referenced advisory. VID de4d4110-ebce-11dc-ae14-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Opera < 9.52 Multiple Vulnerabilities
Binary data 4634.prm...
XSS vulnerability in pagepicker.action and spacepagepicker.action
The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...
XSS vulnerability in pagepicker.action and spacepagepicker.action
The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...
Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061; CVE-2007-3896)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Windows Internet Explorer 7. The vulnerability occurs when Windows does not correctly handle specially crafted URLs or URIs that are passed to it. There are a...
WWWISIS <= 7.1 (IsisScript) Local File Disclosure / XSS Vulnerabilities
No description provided by source. WWWISIS Search Multiple Vulnerabilities Download: http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2 Bug found by JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com d0rk: powered by WWWISIS Stop lammer Local...
CVE-2007-1860
modjk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. dot dot sequences and...
Memory corruption
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
CVE-2007-1205
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
CVE-2007-1205
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
Microsoft Windows Agent fails to properly process crafted URLs
Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...
CVE-2006-7053
Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword filtering in the FAST HTTP module, and signatures in the IDPS HTTP module, via crafted URLs that are "misinterpreted."...
CVE-2006-7053
The CVE-2006-7053 entry concerns Arkoon FAST360 UTM appliances (versions 3.0 through 3.0/29, 3.1, 3.2, 3.3). The vulnerability allows remote attackers to bypass keyword filtering in the FAST HTTP module and bypass signatures in the IDPS HTTP module by sending crafted URLs that are misinterpreted....
CVE-2006-7053
Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword filtering in the FAST HTTP module, and signatures in the IDPS HTTP module, via crafted URLs that are "misinterpreted."...
phpnews130-xss.txt
PHP Script: PHPNews 1.3.0 Class: XSS Website: http://newsphp.sourceforge.net Found by: Detefix dork: inurl:phpnews ----- - Vulnerable Code: $subject by $username on $time ----- - Exploits: http://target/path-to-PHPNews/templates/linktemp.php?url="XSS...
tiny15.txt
C Y B E R - W A R R i O R TIM TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------ Script: TinyWebGallery...
Mozilla Firefox: Multiple vulnerabilities
Background Mozilla Firefox is a redesign of the Mozilla Navigator component. The goal is to produce a cross-platform stand-alone browser application. Description The following vulnerabilities have been reported: Benjamin Smedberg discovered that chrome URL's could be made to reference remote file...