Buffer overflow

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line...

Unfixed Script Insertion vulnerability at yondaimenaruto.frblogs.net

Security researcher 599eme Man, has submitted on 01/07/2009 a Script Insertion vulnerability affecting yondaimenaruto.frblogs.net, which at the time of submission ranked 4161638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

8e6 Technologies R3000 Internet Filter Bypass with Host Decoy

8e6 Technologies R3000 Internet Filter Bypass with Host Decoy Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter contains a...

CVE-2008-2665

Directory traversal vulnerability in the posixaccess function in PHP 5.2.6 and earlier allows remote attackers to bypass safemode restrictions via a .. dot dot in an http URL, which results in the URL being canonicalized to a local filename after the safemode check has successfully run...

Directory traversal

Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safemode restrictions by creating a subdirectory named http: and then placing ../ dot dot slash sequences in an http URL argument to the 1 chdir or 2 ftok function...

8e6-bypass.txt

8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...

Code injection

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

Unfixed XSS vulnerability at www.hackbulten.com

Security researcher St@rExT, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.hackbulten.com, which at the time of submission ranked 1600392 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

CVE-2006-3276: Undefined Security Weakness

Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via 1 a long User-Agent HTTP header in the RTSP service and 2 unspecified vectors involving the "parsing of HTTP URL schemes"...

[Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Real Helix RTSP Server Heap Corruption Vulnerabilities MU-200606-01 June 22, 2006 http://labs.musecurity.com/advisories.html Affected Product / Versions: Real Networks Helix DNA Server 11.0.x Real Networks Helix DNA Server 10.0.x Product Overview: The...

Input-validation vulnerability in PHP-Nuke allows arbitrary command execution via request for remote web site

Overview PHP-Nuke has an input-validation vulnerability that can lead to execution of arbitrary PHP code hosted on another web server. Description PHP-Nuke is a tool designed to ease web site creation and maintenance. PHP-Nuke includes a script named index.php, which uses PHP's include function t...

CVE-2001-0467

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a ... modified dot dot in an HTTP URL request...

CVE-2001-0467

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a ... modified dot dot in an HTTP URL request...

CVE-2001-0367: Undefined Security Weakness

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters...