YaBB 9.11.2000 search.pl Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1921/info YaBB Yet Another Bulletin Board is a popular perl-based bulletin board scripting package. search. pl, one of several perl scripts which comprise YaBB, fails to properly validate user input which arguments a call...

SPIP 1.8.3 Spip_login.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17423/info SPIP is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remot...

FreeBSD : LZO -- potential buffer overrun when processing malicious input data (d1f5e12a-fd5a-11e3-a108-080027ef73ec)

Markus Franz Xaver Johannes Oberhumer reports, in the package's NEWS file : Fixed a potential integer overflow condition in the 'safe' decompressor variants which could result in a possible buffer overrun when processing maliciously crafted compressed input data. As this issue only affects 32-bit...

mplayer -- potential buffer overrun when processing malicious lzo compressed input

Michael Niedermayer and Luca Barbato report in upstream ffmpeg: avutil/lzo: Fix integer overflow...

mencoder -- potential buffer overrun when processing malicious lzo compressed input

Michael Niedermayer and Luca Barbato report in upstream ffmpeg: avutil/lzo: Fix integer overflow...

Multiple Vulnerabilities in D'Link DIR-635

Device Name: DIR-635 Vendor: D-Link ============ Vulnerable Firmware Releases: ============ Firmwareversion: 2.34EU Hardware-Version: B1 Produktseite: DIR-635 ============ Vulnerability Overview: ============ Stored XSS - Status - WLAN - SSID Injecting scripts into the parameter...

Mandriva Update for libvpx MDVSA-2012:023 (libvpx)

Check for the Version of libvpx OpenVAS Vulnerability Test Mandriva Update for libvpx MDVSA-2012:023 libvpx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

MS12-016: Vulnerabilities in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2651026)

The version of the .NET Framework installed on the remote host reportedly is affected by the following vulnerabilities : - The .NET Framework and Silverlight do not properly use unmanaged objects, which could allow a malicious .NET Framework application to access memory in an unsafe manner...

The copper plate while the net mass mailing statistics system v1. 2 vulnerability and the Fix-vulnerability warning-the black bar safety net

Team:makebugs Author: fate 'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenl...

SQL injection in FreePBX 2.5.1

Exploit for unknown platform in category web applications ============================== SQL injection in FreePBX 2.5.1 ============================== Advisory Name: SQL injection in FreePBX 2.5.1 Internal Cybsec Advisory Id: 2010-0103 Vulnerability Class: SQL injection Release Date: 15/01/2010...

paFileDB 3.1 Cross Site Scripting Vulnerability

No description provided by source. ======================================================================================== | Title : paFileDB 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Baidu Hi IM client software DoS bug, div zero make client crash

Baidu Hi IM client software DoS bug, div zero make client crash -- CVE ID: Not assigned -- Affected Vendors: Baidu -- Affected Products: Baidu Hi IM software -- Vulnerability Details: Our automatic bug exploiting tools have found a DoS bug in Baidu Hi IM client which is a popular IM software in...

Debian Security Advisory DSA 1432-1 (link-grammar)

The remote host is missing an update to link-grammar announced via advisory DSA 1432-1. OpenVAS Vulnerability Test $Id: deb14321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1432-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

GLSA-200710-13 : Ampache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-13 Ampache: Multiple vulnerabilities LT discovered that the 'match' parameter in albums.php is not properly sanitized before being processed. The Ampache development team also reported an error when handling user sessions...

SOL7593 - Command injection into F5 ActiveX control

A vulnerability exists in an F5 ActiveX control. The ActiveX control is downloaded to a Windows client system when you log in to a FirePass controller, which is configured for specific pre-logon sequence functionality. The ActiveX control could run executables that reside on the system if an...

[SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1166-1 [email protected] http://www.debian.org/security/ Steve Kemp September 3rd, 2006 http://www.debian.org/security/faq -...

GLSA-200603-07 : flex: Potential insecure code generation

The remote host is affected by the vulnerability described in GLSA-200603-07 flex: Potential insecure code generation Chris Moore discovered a buffer overflow in a special class of lexicographical scanners generated by flex. Only scanners generated by grammars which use either REJECT, or rules wi...

WMNews - footer.php?ctrrowcol Cross-Site Scripting

WMNews - footer.php?ctrrowcol Cross-Site Scripting source: https://www.securityfocus.com/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input...

Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection

source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input. A remote...