Google Talk gtalk:// Deprecated Uri Handler Parameter Injection

Exploit for windows platform in category remote exploits Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of...

CVE-2011-4713

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...

TCExam 11.2.011 SQL Injection

TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution

No description provided by source. Sources: http://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt html p Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX functio...

Real Networks RealPlayer SP - RecordClip Method Remote Code Execution

Real Networks RealPlayer SP - RecordClip Method Remote Code Execution Sources: https://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplaye...

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution

Exploit for windows platform in category remote exploits Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program...

Real Networks RealPlayer SP - 'RecordClip' Method Remote Code Execution

Sources: https://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin...

RealNetworks RealPlayer Code Execution

Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program Files\Real\RealPlayer\RecordingManager.exe has 2 interesting switches: /t will...

RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities : - A 'QCP' parsing heap-based buffer overflow vulnerability exists. CVE-2010-2578 - An uninitialized pointer vulnerability exists in the CDDA URI ActiveX...

Design/Logic Flaw

The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a "...

CVE-2010-3749

The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a "...

CVE-2010-3749

The CVE-2010-3749 flaw affects RealNetworks RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1, in the browser-plugin/ActiveX implementation for the RecordClip method. A specific argument containing a double-quote enables parameter injection that allows remote code execution: an attacker can craft a ...

CVE-2010-3749: Improper Control of Generation of Code

The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a "...

RealNetworks Realplayer RecordClip Parameter Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the browser plugins provided by...

CVE-2009-4926

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the 1 commentName, 2 commentEmail, 3 commentWeb, or 4 commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or...

Eshopbuilde CMS SQL Injection

================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuild...

PEAR Mail软件包Sendmail Mail::Send()方式参数注入漏洞

BUGTRAQ ID: 37081 PEAR是“PHP扩展和应用库”的缩写，用于为PHP用户提供结构化的开源代码库。 PEAR的Mail软件包中sendmail实现没有正确地过滤对Mail::Send方式所提交的from参数，远程攻击者可以向sendmail命令传送任意参数，绕过安全限制获取任意文件的内容。 PEAR Mail 1.1.4 厂商补丁： PEAR ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CUPS < 1.4.2 kerberos Parameter XSS

According to its banner, the version of CUPS installed on the remote host is earlier than 1.4.2. The 'kerberos' parameter in such versions is not properly sanitized before being used to generate dynamic HTML content. An attacker can leverage this issue via a combination of attribute injection and...