Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)

Yahoo! Toolbar is a pop-up blocker for Firefox and Internet Explorer that allows instant access to several Yahoo! features. A buffer overflow vulnerability was reported in Yahoo! Toolbar. This vulnerability is due to boundary errors in the Yahoo! Toolbar YShortcut ActiveX Control. To trigger this...

Mozilla Firefox JavaScript Navigator object vulnerability

Added: 08/14/2006 CVE: CVE-2006-3677 BID: 19192 OSVDB: 27559 Background When used in a web page, Java references properties of the window.navigator object as it starts up in Firefox or SeaMonkey. Problem If a web page replaces the navigator object before starting Java, then the page could cause t...

Confixx 3.1.2 <= SQL Injection

// Confixx 3.1.2 = SQL Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew Snake23 - Exploit: http://www.victim.com/user/index.php?SID=SQL - Googledork: inurl:confixx inurl:login|anmeldung + Greetz to: Bluegeek and Team.Rootbox + Visit:...

DEBIAN-CVE-2004-2186

SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance...

HPE - News Portal Engine

Product : HPE - News Portal Engine Version : 4.0 beta WebSite : http://news.is.free.fr Problem : phpinfo Description: ------------ phpinfo.php =========== ... HPEbeginPage"PHPinfo"; phpinfo; HPEendPage; ... =========== Exploit: -------- http://somehost/HPEdir/HPE/admin/pages/phpinfo.php...

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently...

GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5198/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible for attackers to launch cross site scripting attacks against vulnerable systems. GoAhead WebServer includes unsanitized requested URLs when displaying a 404...

ACME Labs thttpd 2.20 - Cross-Site Scripting

ACME Labs thttpd 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported...

Plumtree Corporate Portal Cross-Site Scripting (Patch Available)

Plumtree Corporate Portal Cross-Site Scripting Patch Available ---------------------------------------------------------------- SYNOPSIS Plumtree www.plumtree.com Corporate Portal versions 4.5, 4.0, 4.0SP1, 4.0i, 4.0iSP1, and 3.5 should be modified to remediate potential cross-site scripting...

Microsoft Internet Explorer 5 (Windows 95/98/2000/NT 4.0) - XML HTTP Redirect

MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a malicious web site owner to read files on a visiting user's computer. A web page...

Yamaha MidiPlug 1.1 b-j MidiPlug - Local Buffer Overflow

Yamaha MidiPlug 1.1 b-j MidiPlug - Local Buffer Overflow // source: https://www.securityfocus.com/bid/760/info There is a buffer overflow in the MidiPlug that may allow arbitrary code to be executed on the local host. This overflow occurs if a long "Text" variable is specified within an EMBED tag...

Yamaha MidiPlug 1.1 b-j MidiPlug - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/760/info There is a buffer overflow in the MidiPlug that may allow arbitrary code to be executed on the local host. This overflow occurs if a long "Text" variable is specified within an EMBED tag in a web page. Instructions in the text variable may be...