7733 matches found
RunCMS <= 1.6 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================ RunCMS Local File Inclusion Remote Code Execution Code Snippet: /include/common.php line131-143 // :: Register Globals Compatibility :: $globalstest = @ini...
Apple QuickTime RTSP Response Header Content-Type Remote Stack Based Buffer Overflow Vulnerability
Description Apple QuickTime is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized stack-based memory buffer. This issue occurs when handling specially crafted RTSP Response headers...
SkyPortal vRC6 Multiple Remote Vulnerabilities
Opencosmo Security www.opencosmo.com WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders : Shahin...
skyportal vrc6 - Multiple Vulnerabilities
skyportal vrc6 - Multiple Vulnerabilities WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders :...
SkyPortal vRC6 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================== SkyPortal vRC6 Multiple Remote Vulnerabilities ============================================== BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection...
Unfixed XSS vulnerability at www.tidaholm.se
Security researcher Uber0n, has submitted on 19/11/2007 a cross-site-scripting XSS vulnerability affecting www.tidaholm.se, which at the time of submission ranked 2528319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is current...
[SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Remote code execution in Samba's WINS == server daemon nmbd when processing name == registration followed name query requests. == == CVE ID: CVE-2007-5398 == == Versions: Samba...
Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability
====================================================================== Secunia Research 15/11/2007 - Samba "replynetbiospacket" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
USN-542-2: KOffice vulnerabilities
USN-542-1 fixed a vulnerability in poppler. This update provides the corresponding updates for KWord, part of KOffice. Original advisory details: Secunia Research discovered several vulnerabilities in poppler. If a user were tricked into loading a specially crafted PDF file, a remote attacker cou...
Remote code execution in Samba's WINS
Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect may only be exploited when the "wins support" parameter has been enabled in smb.conf. Patch Availability A patch addressing this defect has been posted to...
FreeBSD : xpdf -- multiple remote Stream.CC vulnerabilities (2747fc39-915b-11dc-9239-001c2514716c)
Secunia Research reports : Secunia Research has discovered some vulnerabilities in Xpdf, which can be exploited by malicious people to compromise a user's system. - An array indexing error within the 'DCTStream::readProgressiveDataUnit' method in xpdf/Stream.cc can be exploited to corrupt memory...
Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)
Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...
iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
iDefense Security Advisory 11.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 07, 2007 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databases to enterprise solutions. Further information is available at the following URL...
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - AbiWord Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities
====================================================================== Secunia Research 07/11/2007 - Xpdf "Stream.cc" Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
====================================================================== Secunia Research 31/10/2007 - CUPS IPP Tags Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow
====================================================================== Secunia Research 30/10/2007 - IPSwitch IMail Server IMail Client Buffer Overflow - ====================================================================== Table of Contents Affected...
iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability
IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability iDefense Security Advisory 10.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 30, 2007 I. BACKGROUND The crontab program is a user utility that enables users to create, remove, and edit cron jobs. The cron jobs will then later...
Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion
====================================================================== Secunia Research 29/10/2007 - IBM Tivoli Storage Manager Client CAD Service Script Insertion - ====================================================================== Table of Contents Affected...