CVE-2008-6912

creationtimestamp| type| source ---|---|--- 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7066 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32575...

CVE-2008-4895

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6935 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32563...

CVE-2008-4900

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6944...

[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2008-2938: Apache Tomcat information disclosure vulnerability - Updated Severity: Important was moderate Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.37 Tomcat 5.5.0 to 5.5.26 Tomcat 6.0.0 to 6.0.16 The unsupported...

[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)

2008-012 Horde, Popoon frameworks common input sanitization errors XSS Two cross-site scripting XSS vulnerabilities were reported in Horde Framework. The first of which is that the Horde framework fails to properly sanitize the filename of MIME attachments on received emails. The second...

Alphanumeric Shellcode Encoder Decoder

No description provided by source. / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Alphanumeric Shellcode Encoder Decoder Copyright 1985-2008 Avri Schneider - Aladdin Knowledge Systems, Inc. All rights reserved. This program...

blazedvd_bof.pl.txt

!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...

CVE-2008-4321

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6240 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6248 2008-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6256 2026-06-28...

CVE-2008-4425

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...

Mozilla Foundation Security Advisory 2008-28

Mozilla Foundation Security Advisory 2008-28 Title: Arbitrary socket connections with Java LiveConnect on Mac OS X Impact: High Announced: July 1, 2008 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 3.0 Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Security researcher...

CVE-2008-2688

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5765 2010-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15448...

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...

PHP path translation vulnerability

Overview PHP contains a path translation vulnerability that may allow an attacker to execute arbitrary code. Description PHP is a scripting language that is designed for web-based applications and can be imbedded directly into HTML.PHP versions prior to 5.2.6 contain a path translation...

Immunity Canvas: VISUALPIC_INCLUDE

Name| visualpicinclude ---|--- CVE| CVE-2008-1876 Exploit Pack| CANVAS Description| VisualPic 0.3.1 Remote File Include Notes| CVE Name: CVE-2008-1876 VENDOR: Snarky.fr Repeatability: Infinite References: http://www.frsirt.com/english/advisories/2008/1127 CVE Url:...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0887. Reason: This candidate is a duplicate of CVE-2008-0887. Notes: All CVE users should reference CVE-2008-0887 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

PR07-41: XSS on Juniper Networks Secure Access 2000

PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...

CVE-2008-0628

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

Xxe

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2008-0628

CVE-2008-0628 affects Sun Java Runtime Environment (JRE/JDK) 6 Update 3 and earlier. The XML parsing code processes external entity references even when the “external general entities” property is false, enabling an XXE attack that can cause denial of service or allow access to restricted resourc...