Millenium MP3 Studio 2.0 mpf file BoF

No description provided by source. + Vulnerability : .mpf File Local Stack Overflow Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2/SP3 En + Written by...

SLES9: Security update for Tk

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tk-devel tk For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010158 within the...

jetAudio v 7.1.9.4030 plus vx (.m3u ) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit (update)

Exploit for unknown platform in category local exploits ======================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit update ======================================================================== + Vulnerability : .m3u...

PHPMesFilms 1.0 - 'index.php?id' SQL Injection

in the name of God Download script : http://www.script-masters.com/home/download.php?script=138 ---------------------------------------------------------- Discovered By: SuB-ZeRofrom algeria msn: [email protected] D-unit : SuB-ZeRo & Me!sTer & HaLokA Home: www.dz-security.net/ my exploit :...

PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Design/Logic Flaw

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

CVE-2008-5318

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

CVE-2008-5318

Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653...

CVE-2008-5318

CVE-2008-5318 affects Tiki Wiki CMS Groupware prior to 2.2; the issue is described as an input sanitation weakness related to the size of user-provided input. Exploitation details and exact impact are not provided in the CVE description, but a public NES/OPENVAS entry classifies it as an input sa...

Fixed in Apache Tomcat 5.5.27

Low: Cross-site scripting CVE-2008-1232 The message argument of HttpServletResponse.sendError call is not only displayed on the error page, but is also used for the reason-phrase of HTTP response. This may include characters that are illegal in HTTP headers. It is possible for a specially crafted...

Debian DSA-1592-1 : linux-2.6 - heap overflow

Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1673 Wei Wang from McAfee reported a potential heap overflow in the ASN.1...

[SECURITY] Fedora 7 Update: xfce4-weather-plugin-0.6.2-2.fc7

A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...

[Full-disclosure] firefox 2.0.0.2 crash

Can be dupe but in fast browsing over topics I did not discovered this exploit: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif I do NOT know anything else than this url. Just seen it in random discussion and anyone else I asked knows nothing. Current tests indicate that...

CVE-2007-1325

The PMAArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service web server crash via an array with many dimensions. NOTE: it could be argued tha...

phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion

No description provided by source. +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2....

[Full-disclosure] MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create a...

Comdev Photo Gallery 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Photo Gallery 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Photo Gallery 3.1 + Venedor ...........: http://www.comdevweb.com +...

[KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection

KAPDA::47 - myNewsletter 1.1.2 SQLInjection SQLInjection ------- KAPDA New advisory Vulnerable products : myNewsletter = 1.1.2 Vendor: http://www.aspburst.com/index.asp Risk: Medium Vulnerability: SQLInjection Date : -------------------- Found : 2006/06/05 Vendor Contacted : 2006/06/06 Release Da...

vulnerability details

Release Date: 03/01/2006 Affected Applications: SAP WebAS Kernel up to version 7.00 Affected Platforms: Platform-Independant Local / Remote: Remote Severity: Medium to High Author: A. Grossmann arnold.grossmann at gmail.com Vendor Status: Confirmed Product Overview cited from SAP :...