5876 matches found
phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion
Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability Vendor: http://www.rfnnet.nl/downloads/phpbb/MODForumpictureandMETAtags.zip Founder: bd0rk Contact: bd0rkathackermail.com Greetings: str0ke, TheJT, Lu7k, CodeR Vulnerable in MODforumfieldsparse.php:...
WEB vulnerabilities mining techniques-vulnerability warning-the black bar safety net
Source: security focus Author: 7all sgh81at163.com WEB vulnerability Mining Technology |=---------------= WEB vulnerability Mining Technology=-----------------------------=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163. com...
KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞
JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...
Php5 GPC bypass flaw-vulnerability warning-the black bar safety net
In the discussion of specific defects before we start to learn a little about php security aspect of small things. magicquotesgpc option is php one of the important security settings, when the option is ON that is open at the time, all from GET, POST, COOKie is passed over the data in the'," and,...
Debian DSA-998-1 : libextractor - several vulnerabilities
Derek Noonburg has fixed several potential vulnerabilities in xpdf, which are also present in libextractor, a library to extract arbitrary meta-data from files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Debian DSA-957-2 : imagemagick - missing shell meta sanitising
Florian Weimer discovered that delegate code in ImageMagick is vulnerable to shell command injection using specially crafted file names. This allows attackers to encode commands inside of graphic commands. With some user interaction, this is exploitable through Gnus and Thunderbird. This update...
CVE-2006-4909: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.16, when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh...
brush.txt
Description: yet another 'windows meta file' WMF denial of service exploit. System affected: + Windows XP SP2, + Windows 2003 SP1, + Windows XP SP1, + Windows XP + Windows 2003 Tech info: page fault in gdi32!CreateBrushIndirect because invalid pointer access. Incorrect short to void sign extensio...
Code injection
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
DEBIAN-CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
CVE-2006-2441
PVE: CVE-2006-2441 affects the Pioneer s meta-server prior to version 0.9.55. When the server-console is not installed, remote attackers can cause a denial-of-service (crash) by sending certain requests to create a new game from an older gnocatan client. The vulnerability details specify the impa...
CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
Two heap overflow in libextractor 0.5.13 (rev 2832)
Luigi Auriemma Application: libextractor http://gnunet.org/libextractor/ Versions: = 0.5.13 rev 2832 Platforms: nix, BSD, Windows and more Bugs: A heap overflow in asfextractor B heap overflow in qtextractor Exploitation: local Date: 17 May 2006 Author: Luigi Auriemma e-mail: [email protected]...
CVE-2006-2441: Undefined Security Weakness
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
1asphost.txt
This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=alert'HACKED%20!' Example DomainDLX http://www.domaindlx.com/MainLogin.aspx?error=alert'HACKED%20!'...
The Includer RCE Vulnerability
The Includer is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...