CVE-2014-8867: Undefined Security Weakness

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O MMIO emulated in the hypervisor, which allows local HVM guests to cause a denial of service host crash via unspecified vectors...

Insufficient bounding of "REP MOVS" to MMIO emulated inside the hypervisor

ISSUE DESCRIPTION Acceleration support for the "REP MOVS" instruction, when the first iteration accesses memory mapped I/O emulated internally in the hypervisor, incorrectly assumes that the whole range accessed is handled by the same hypervisor sub-component. IMPACT A buggy or malicious HVM gues...

House Rejects Amendment to Sever NSA Data Collection Funding

By a narrow dozen votes, the U.S. House of Representatives yesterday failed to pass an amendment to the Department of Defense Appropriations Act of 2014 that would have severed funding for the NSA’s phone record surveillance program turned out by Edward Snowden. The amendment, put forth by Rep...

Congressman Calls on Apple to Explain iPhone Tracking

Congress stepped into the brewing controversy over a recently disclosed tracking feature in most versions of Apple’s popular iPhone. Representative Ed Markey D-Mass has written a letter to Apple CEO Steve Jobs asking for more information about the feature PDF, suggesting that it may run afoul of...

Cross site scripting

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

CVE-2009-1880

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

CVE-2009-1880

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

CVE-2009-1880

CVE-2009-1880 affects MT312 REP-BBS. The vulnerability is a Cross-Site Scripting (XSS) issue in REP-BBS that can allow a remote attacker to inject arbitrary script/HTML via unspecified vectors related to files in the installed package, specifically model.php and config.php, with a timestamp befor...

CVE-2009-1880: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

JVN#01115659 REP-BBS from MT312 vulnerable to cross-site scripting

REP-BBS from MT312, is a web log system that supports posting and viewing web logs from a mobile phone. REP-BBS contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update the software to the latest versi...

CVE-2008-2228: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...

CVE-2006-6248

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message...

CVE-2006-6248: Undefined Security Weakness

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message...

PT-2006-5603 · Hitweb · Hitweb

Name of the Vulnerable Software and Affected Versions: Hitweb versions 3.0 Description: The issue concerns remote file inclusion vulnerabilities in Hitweb 3.0, allowing remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the REP CLASS parameter to various PHP...

CVE-2006-2398: Undefined Security Weakness

Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the rep parameter...

CVE-2006-2397: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 rep parameter to a index.php or b diapo.php or 2 image parameter to c affich.php. NOTE: item 1a might be resultant from directory traversal...

CVE-2006-2014: Undefined Security Weakness

Directory traversal vulnerability in gallerie.php in SLsite 1.0 allows remote attackers to list images in arbitrary directories via ".." sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php. NOTE: this issue could be used to produce resultant XSS fro...

CVE-2004-0246

Multiple PHP remote file inclusion vulnerabilities in 1 fonctions.lib.php, 2 dernierscommentaires.php, and 3 admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter...

[UNIX] Local Buffer Overflow in REP (Long ARG)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2004-0246: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in 1 fonctions.lib.php, 2 dernierscommentaires.php, and 3 admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter...