CVE-2008-6433

The CVE-2008-6433 issue affects Blue River Interactive Group Sava CMS prior to version 5.0.122. A cross-site scripting (XSS) vulnerability exists in index.cfm where the keywords parameter in a search action can be exploited to inject arbitrary web script or HTML. This is a remote impact vulnerabi...

CVE-2008-6433

Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...

Titan FTP Server 'SITE WHO' Command Remote DoS Vulnerability

The host is running Titan FTP Server and is prone to denial of service vulnerability. The flaw is due to error in the 'SITE WHO' command processing, which can be exploited to exhaust available CPU resources. OpenVAS Vulnerability Test $Id: secpodtitanftpservercmdprocessingdosvuln900160.nasl 4557...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-2476

The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...

Unfixed XSS vulnerability at www.rivercitygames.ca

Security researcher Hotpockets, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting www.rivercitygames.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is...

jriver.txt

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

J. River Media Center 11.0.309 Remote Denial of Service PoC

Exploit for unknown platform in category dos / poc =========================================================== J. River Media Center 11.0.309 Remote Denial of Service PoC =========================================================== !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Cent...

KLA10230 DoS vulnerability in J River Media Center

A buffer overflow was found in J River Media Center. By exploiting this vulnerability malicious users can cause denial of service and possible execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Forum topic securityfocus Related...

J. River Media Center buffer overflow

Buffer overflow on oversized TCP/8070 port string...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

J. River Media Center 11.0.309 - Remote Denial of Service PoC !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a...

CVE-2006-0867

Buffer overflow in certain versions of South River aka SRT WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service application crash and persistent erratic behavior via a long string in the name entry field...

Buffer overflow

Buffer overflow in certain versions of South River aka SRT WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service application crash and persistent erratic behavior via a long string in the name entry field...

CVE-2006-0867

Buffer overflow in certain versions of South River aka SRT WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service application crash and persistent erratic behavior via a long string in the name entry field...