Microsoft Windows Media Player网络共享服务RTSP释放后使用漏洞（MS10-075）

BUGTRAQ ID: 43776 CVE ID: CVE-2010-3225 Windows Media Player是微软操作系统中默认捆绑的媒体播放器。 Windows Media Player对同一网络中其他设备的流媒体支持方式存在释放后使用漏洞。如果向播放器的流媒体服务例程发送了特制的RTSP请求，播放器就会释放一个对象之后再重新使用，这可能导致执行任意代码。 Microsoft Windows Media Player 11 临时解决方法： 在受影响的系统上禁用Windows媒体播放器网络共享服务。 交互方法 1...

[SECURITY] Fedora 13 Update: gnome-subtitles-1.0-3.fc13

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

[SECURITY] Fedora 14 Update: gnome-subtitles-1.0-3.fc14

Gnome Subtitles is a subtitle editor for the GNOME desktop. It supports the most common text-based subtitle formats and allows for subtitle editing, translation and synchronization...

Fedora 14 : Django-1.2.3-1.fc14 (2010-14745)

' Today the Django team has released Django 1.2.3, which remedies several issues with the recent 1.2.2 package. This package corrects the following problems : - The patch applied for the security issue covered in Django 1.2.2 caused issues with non-ASCII responses using CSRF tokens. This has been...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...

dynpage 1.0 - Multiple Vulnerabilities

dynpage 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-7-dynpage-multiple-remote-vulnerabilities/ ''' - Title : DynPage Multiple Remote Vulnerabilities. -...

Easypush Server Manager Persistent Xss Vulnerability

No description provided by source. Name : Easypush Server Manager Persistent Xss Vulnerability Date : Sept,1 2010 Vendor Url : http://deeproot.in/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt special thanks to : r0073r inj3ct0r.com,L0rd...

Easypush Server Manager Persistent Xss Vulnerability

Exploit for php platform in category web applications ==================================================== Easypush Server Manager Persistent Xss Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

CVE-2010-3114 affects Google Chrome prior to 5.0.375.127 and webkitgtk prior to 1.2.6. The root cause is a failure to properly handle SVG documents due to incorrect processing within WebKit’s text/SVG handling paths, enabling remote attackers to induce a denial of service through memory corruptio...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

Removed by vendor...

Google Chrome < 5.0.375.127 Multiple Vulnerabilities

Binary data 5644.pasl...

Google Chrome < 5.0.375.127 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 5.0.375.127. Such versions are reportedly affected by multiple vulnerabilities : - A memory corruption vulnerability exists with the file dialog. Issue 45400 - A memory corruption vulnerability exists when processing SVG...

CVE-2010-2697

CVE-2010-2697 is a cross-site scripting (XSS) vulnerability in Sijio Community Software. The flaw lets remote authenticated users inject arbitrary web script or HTML through the title parameter when adding a new blog, related to edit_blog/index.php. The description notes this is an authenticated ...

CVE-2010-2698

Multiple cross-site scripting XSS vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when 1 editing a new blog, 2 adding an album, or 3 editing an album. NOTE: the provenance of this information is unknown; t...

Acuity CMS 2.7.1 - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

CMS control panel v2.0 Edit File Vulnerability

Exploit for php platform in category web applications ============================================== CMS control panel v2.0 Edit File Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...

Holiday Travel Portal - Arbitrary File Upload

========================================================== Holiday Travel Portal Upload Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...