Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution

Added: 09/20/2010 CVE: CVE-2010-1818 BID: 42841 OSVDB: 67705 Background Apple QuickTime is a media player for Windows and Mac OS platforms. Problem An input validation error in Apple QuickTime 7.6.7 and earlier versions allows remote attackers to execute arbitrary code by enticing the user to ope...

Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...

VLC Media Player Meta-Information Denial of Service Vulnerability (Linux)

The host is installed with VLC Media Player and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdosvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VLC Media Player Meta-Information Denial of Service Vulnerability Linux Authors: Madhuri D Copyright:...

VLC Media Player Meta-Information Denial of Service Vulnerability - Windows

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Meta-Information Denial of Service Vulnerability - Linux

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Core Security Technologies Advisory 2010.0623

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...

Microsoft Windows CreateWindow Function Callback Vulnerability (MS10-048)

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function...

Microsoft Windows CreateWindow Function Callback (MS10-048)

Exploit for windows platform in category dos / poc =========================================================== Microsoft Windows CreateWindow Function Callback MS10-048 =========================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...

Microsoft Windows - CreateWindow Function Callback (MS10-048)

Microsoft Windows - CreateWindow Function Callback MS10-048 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Window...

Microsoft Windows - CreateWindow Function Callback (MS10-048)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...

CruxCMS 'txtusername' Parameter Cross Site Scripting Vulnerability

CruxCMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

XSS holes dotDefender

dotDefender is prone to a XSS because it doesn't satinate the input vars correctly. Injecting obfusctated JavaScript code based on references vars assignment, the dotDefender WAF is vulnerable. Class: Input Validation Error Remote: Yes Credit: David K. SH4V Vulnerable: till 4.02 Exploit: img...

dotDefender 4.02 Authentication Bypass Vulnerability

Exploit for windows platform in category remote exploits ==================================================== dotDefender 4.02 Authentication Bypass Vulnerability ==================================================== dotDefender is prone to a XSS because it doesn't satinate the input vars correctl...

dotDefender 4.02 - Authentication Bypass

dotDefender 4.02 - Authentication Bypass dotDefender is prone to a XSS because it doesn't satinate the input vars correctly. Injecting obfusctated JavaScript code based on references vars assignment, the dotDefender WAF is vulnerable. Class: Input Validation Error Remote: Yes Credit: David K. SH4...

dotDefender 4.02 - Authentication Bypass

dotDefender is prone to a XSS because it doesn't satinate the input vars correctly. Injecting obfusctated JavaScript code based on references vars assignment, the dotDefender WAF is vulnerable. Class: Input Validation Error Remote: Yes Credit: David K. SH4V Vulnerable: till 4.02 Exploit: //POST...

Titan FTP Server < 8.30.1231 Directory Traversal Vulnerabilities

Titan FTP Server is prone to directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nakid CMS 'core[system_path]' Parameter Remote File Inclusion Vulnerability

This host is running Nakid CMS and is prone to remote file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodnakidcmsrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Nakid CMS 'coresystempath' Parameter Remote File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...

Nakid CMS <= 0.5.2 RFI Vulnerability

Nakid CMS is prone to a remote file inclusion RFI vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CMScout <= 2.09 XSS Vulnerability

CMScout is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

HP Power Manager formExportDataLogs Directory Traversal (CVE-2009-4000)

HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS. A directory traversal vulnerability has been reported in HP Power Manager. The vulnerability is due to an input validation error while processing parameters sent to a certain form of the web based...