3434 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3110
Cross-site scripting XSS vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3110
Technical details for CVE-2007-3110 are not publicly available in the provided documents. Monitor for updates from official advisories; current records reiterate an XSS issue in the Beatnik 1.0 Firefox extension via RSS, without specifics.
CVE-2007-3110
Cross-site scripting XSS vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2726
BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...
Design/Logic Flaw
BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...
CVE-2007-2726
CVE-2007-2726 affects BitsCast 0.13.0. The vulnerability arises in RSS 2.0 feed item parsing, where certain invalid strings in a pubDate element (for example, patterns like "../A" or "A/../") can cause the application to crash, yielding a denial of service. The available sources (NVD/CVE pages) c...
CVE-2007-2726
BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...
bitscast-dos.txt
BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: Test Remote DoS PoC ../A../A../A../A../A../A../A../A../A../A../A../A...
NewzCrawler 1.8 (invalid string) Remote Denial of Service Exploit
No description provided by source. NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file...
newzcrawler-dos.txt
NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file. '%s', '%Y', '%%', 'n,', and other...
BitsCast 0.13.0 - invalid string Remote Denial of Service
BitsCast 0.13.0 - invalid string Remote Denial of Service BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: Test Remote DoS Po...
NewzCrawler 1.8 - invalid string Remote Denial of Service
NewzCrawler 1.8 - invalid string Remote Denial of Service NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a...
BitsCast 0.13.0 - invalid string Remote Denial of Service
BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: Test Remote DoS PoC ../A../A../A../A../A../A../A../A../A../A../A../A...
NewzCrawler 1.8 - invalid string Remote Denial of Service
NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file. '%s', '%Y', '%%', 'n,', and...
BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit
No description provided by source. BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: ?xml version="1.0"? rss version="2.0"...
BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================= BitsCast 0.13.0 invalid string Remote Denial of Service Exploit ================================================================= BitsCast 0.13.0 Remote Denial of Service Credits:...
CVE-2007-2552
The RecentChanges feature in WikkaWiki Wikka Wiki before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds...
Information disclosure
The RecentChanges feature in WikkaWiki Wikka Wiki before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds...