PT-2013-1677

Name of the Vulnerable Software and Affected Versions Ruby versions 1.8.7 before patchlevel 371 Ruby versions 1.9.3 before patchlevel 286 Ruby versions 2.0 before revision r37068 Description The issue allows context-dependent attackers to bypass safe-level restrictions and modify untainted string...

PT-2012-5247

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 17.0 Thunderbird versions prior to 17.0 SeaMonkey versions prior to 2.14 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes

Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes. Shellcode exploit for arm platform / Title: Linux/ARM - execve"/bin/sh", 0, 0 vars - 30 bytes Date: 2012-09-08 Tested on: ARM1176JZF-S v6l Author: midnitesnake 00008054 : 8054: e28f6001 add r6, pc, 1 8058: e12fff16 bx r6 805c: 4678 mov...

CVE-2011-4812

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

CVE-2011-4812

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

CVE-2011-4811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pokazpodkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter...

CVE-2011-4812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

PT-2011-5117

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the str parameter in the pokaz podkat.php file. Recommendations At the moment, there is no information about a newe...

PT-2011-5118

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the str parameter in the...

linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes ================================================================ / Title: Linux/ARM - setuid0 &...

Hummingbird STR Service Buffer Overflow

Hummingbird STR service STRsvc.exe is installed on the remote host. It is included with EMC Documentum eRoom, OpenText Hummingbird, and OpenText Search Server. The installed version is affected by a buffer overflow vulnerability. By sending a very large packet to the Hummingbird STR service, it m...

多个厂商Hummingbird STR服务栈溢出漏洞

BUGTRAQ ID: 36868 EMC Documentum eRoom是基于WEB的协作服务器，OpenText Search Server是高效的纯文本搜索引擎，上述产品都使用了Hummingbird STR服务。 默认监听于TCP 10500端口上的Hummingbird STR服务（STRsvc.exe）中存在栈溢出漏洞。STRlib.dll模块将接收到的网络报文拷贝到了静态的栈缓冲区，如果发送了超长的报文就可以触发栈溢出，导致以SYSTEM权限执行任意指令。 EMC Documentum eRoom 7.4.1 Open Text Corporation Search...

Hummingbird STR service / EMC Documentum eRoom / OpenText Search Server buffer overflow

Buffer overflow on TCP/10500 traffic parsing...

ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-074 October 28, 2009 -- Affected Vendors: EMC OpenText -- Affected Products: EMC Documentum eRoom OpenText Hummingbird OpenText Search Server -- TippingPointTM IPS...

Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR...

DSA-1781-1 ffmpeg ffmpeg-debian - arbitrary code execution

Bulletin has no description...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2008:157)

A vulnerability was found in how ffmpeg handled STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg CVE-2008-3162. The updated packages have been patched to corre...

Ubuntu Update for ffmpeg vulnerability USN-630-1

Ubuntu Update for Linux kernel vulnerabilities USN-630-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6301.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ffmpeg vulnerability USN-630-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mplayer -- vulnerability in STR files processor

The remote host is missing an update to the system as announced in the referenced advisory. VID 5ccb1c14-e357-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5ccb1c14-e357-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...