Out-of-bounds

Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed map, which triggers an out-of-bounds read during a minimap preview...

StarCraft memory corruption

Memory corruption on map preview received from server...

Blizzard Entertainment StarCraft Brood War 1.15.1 - Minimap Preview Remote Denial of Service

source: https://www.securityfocus.com/bid/25478/info StarCraft Brood War is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Th...

CVE-2007-2405

Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2007-2405

CVE-2007-2405 describes an integer underflow in Preview (PDFKit) on Mac OS X 10.4.10 that can be triggered by a crafted PDF file to achieve remote code execution. The affected component is Preview/PDFKit in Mac OS X’s PDF handling. The CVSS metrics indicate network access, no authentication, and ...

Cross site scripting

Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...

Moderate: Red Hat Security Advisory: iscsi-initiator-utils security update

Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...

RHEL 5 : iscsi-initiator-utils (RHSA-2007:0497)

Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...

CVE-2007-2861

Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News SAXON 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 news.php, 2 preview.php, or 3 archive-display.php...

saxon-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

postrev-rfi.txt

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Post Revolution = 0.7.0 RC 2 dir Remote File Inclusion Vulnerability ======================================================================= Post Revolution Remote Fil...

Sql injection

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter...

CVE-2007-1445

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter...

[Full-disclosure] TinyMCE_exp Remote File Include Vulnerability

TinyMCEexp Remote File Include Vulnerability Author: Arturo Z. Contact: [email protected] Website: www.diosdelared.com Date: 10/03/07 Risk: critical Vendor Url: http://www.joomlaya.com/index.php?option=comremository&func=fileinfo&filecatid=1868 Affected Software: TinyMCEexp search: allinurl:...

Microsoft Windows OLE files DoS

Crash on OLE file .DOC preview...

Information disclosure

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1141

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...