8046 matches found
PT-2007-1398 · Php · Lib/Php/Phphtmllib +1
Name of the Vulnerable Software and Affected Versions: lib/php/phphtmllib-2.5.4 maintain version 3.0.0-RC2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. This issue might be related to phpHtmlLib. It is noted...
CVE-2007-1246
The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerabilit...
Buffer overflow
The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerabilit...
CVE-2007-1246
The CVE-2007-1246 issue affects MPlayer prior to/including 1.0rc1 (as used in xine-lib). The vulnerability resides in DMO_VideoDecoder_Open (loader/dmo/DMO_VideoDecoder.c) where biSize is not set before a memcpy, enabling a user‑assisted remote attacker to trigger a buffer overflow and potentiall...
WebMod 0.48 (Content-Length) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category remote exploits =============================================================== WebMod 0.48 Content-Length Remote Buffer Overflow Exploit PoC =============================================================== / WebMod Stack Buffer Overflow by cybermind Kevin...
CVE-2007-1097: Improper Input Validation
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool inc/lib/attachment.lib.php in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained fro...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 9.1 : xine-lib (SSA:2006-357-05)
New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-05. The text itself is...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2006:176)
Xine-lib uses an embedded copy of ffmpeg and as such has been updated to address the following issue: Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in ...
SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel
The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...
libxine -- buffer overflow vulnerability
xine Team reports: A new xine-lib version is now available. This release contains a security fix array index vulnerability which may lead to a stack buffer overflow...
CVE-2007-0571: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/lib/libhead.php in phpMyReports 3.0.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathModule parameter...
CVE-2007-0568: Undefined Security Weakness
PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the glroot parameter...
CVE-2007-0508: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...
CVE-2007-0496: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
PT-2007-1946 · Phpadsnew · Openads
Name of the Vulnerable Software and Affected Versions: Openads aka phpAdsNew version 2.0.7 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAds geoPlugin parameter to "libraries/lib-remotehost.inc", the 2 filename...
Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion
Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
CVE-2006-6920: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving 1 lib/ADMIN.php and 2 lib/SKIN.php...
Debian DSA-1244-1 : xine-lib - buffer overflow
It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...