CVE-2012-4514

rendering/renderreplaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted web page, related to "trying to reuse a frame with a null part."...

Adobe Releases Malware Classifier Tool

Adobe has published a free tool that can help administrators and security researchers classify suspicious files as malicious or benign, using specific machine-learning algorithms. The tool is a command-line utility that Adobe officials hope will make binary classification a little easier. Adobe...

XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke

Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...

Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal

Seeker Research Center Security Advisory This vulnerability was discovered by Seeker® Automatic Run-Time Application Security Testing Solution Disclosed By Irene Abezgauz, September 13th, 2011 ========= I. Overview ========= A Cross Site Scripting vulnerability has been identified in Microsoft...

Electronic JukeBox - Hardware Hacking Part 1 & 2

Document Title: =============== Electronic JukeBox - Hardware Hacking Part 1 & 2 References: =========== View Part1: http://www.youtube.com/watch?v=0rTiXldgeW4 View Part2: http://www.youtube.com/watch?v=dAX4p1oMTtw Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID:...

VLC Media Player 'MP4_ReadBox_skcr()' Buffer Overflow Vulnerability - Linux

VLC Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.hvacpartstore.com

Security researcher nullbyt3, has submitted on 19/03/2011 a cross-site-scripting XSS vulnerability affecting www.hvacpartstore.com, which at the time of submission ranked 3681862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

Metamail Format String And Buffer Overflow (CVE-2004-0104)

Metamail is a system for handling multimedia mail, using the mailcapfile. Metamail reads the mailcap file, which tells Metamail what helper program to call in order to handle a particular type of non-text mail. There exist multiple vulnerabilities in MetaMail that may provide for arbitrary code...

3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)

MPEG-4 Part 14, formally ISO/IEC 14496-14:2003, is a multimedia container format standard specified as a part of MPEG-4. It is most commonly used to store digital audio and digital video streams, especially those defined by MPEG, but can also be used to store other data such as subtitles and stil...

Silverleaf CMS SQL Injection / XSS

Silverleaf CMS SQL Injection & XSS Vulnerable ----'' Info '' ----- + CMS is Silverleaf + http://silverleafcms.com/ + Injection Part is: memberid= Go Vulnerable like :: www.silverleafvuln.cms.com/?sec=member&memberid='SQL Injection SQL Injection :: www.silverleafvuln.cms.com/?sec=member&memberid=1...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Directory traversal

Directory traversal vulnerability in the usergetprofile function in include/functions.inc.php in Coppermine Photo Gallery CPG 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang part of serialized data in...

DEBIAN-CVE-2008-1563

The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark formerly Ethereal 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service application crash via a malformed packet...

Connectix Boards <= 0.8.2 template_path Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ===================================================================== Connectix Boards Dork : powered by connectix boards Risk : High Download : http://www.connectix-boards.org/ Exploit:...

Design/Logic Flaw

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid dereference...

DEBIAN-CVE-2008-0285

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid dereference...

CVE-2008-0285

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid dereference...

okulop-sql.txt

Dumenci v19.1 Okul Otomasyon Portal v2.0 remote sql injection AUTHOR : Okulumun sitesi Script Download : http://www.okulumunsitesi.com/ DORK: "inurl:/k12.tr/?part=" Injection Adress : http://site.com/default.asp?islem=1&id=sql code my COD : -1+union+select+0,1,id,baslik,4,5,6+from+haber...

Directory traversal

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...