imageVue Gallery r16 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : imageVue Gallery Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

DEBIAN-CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

PHP upload - 'unijimpe' Arbitrary File Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Mandriva Security Advisory MDVSA-2009:093-1 (mpg123)

The remote host is missing an update to mpg123 announced via advisory MDVSA-2009:093-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Piwigo v2.0.6 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Piwigo : mysqlfetcharray expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\piwigo-2.0.6\include\functions.inc.php on line 936 The parentid and imageid and unsanitized however...

Microsoft Internet Explorer XHTML DOM Manipulation Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a user must visit a malicious web page. The specific flaw exists in the manipulation and parsing of certain HTML tags. The ordering...

[SECURITY] Fedora 11 Update: expat-2.0.1-8.fc11

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 10 Update: expat-2.0.1-8.fc10

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

CVE-2009-4201

Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the 1 ID3v1, 2 ID3v2, or 3 APEv2 metadata field...

Stack overflow

Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the 1 ID3v1, 2 ID3v2, or 3 APEv2 metadata field...

CVE-2009-4201

The CVE-2009-4201 entry concerns Mp3 Tag Assistant Professional 2.92 build 300, which contains multiple stack-based buffer overflows in the MP3 metadata parsing logic. Specifically, overflows occur when processing long strings in ID3v1, ID3v2, or APEv2 metadata fields, enabling remote attackers t...

CVE-2009-4201

Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the 1 ID3v1, 2 ID3v2, or 3 APEv2 metadata field...

Firefox Sage扩展RSS源跨域脚本执行漏洞

BUGTRAQ ID: 37120 CVECAN ID: CVE-2009-4102 Sage是Firefox所使用的轻型RSS和Atom源汇集器扩展。 Sage没有正确地过滤RSS源中的description标签输入便用于渲染内容，用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla Sage 1.4.3 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://addons.mozilla.org/en-US/firefox/addon/77...

SLES11: Security update for pidgin

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cdparanoia desktop-file-utils fam gnome-vfs2 gstreamer-010 libogg0 liboil More details may also be found by searching for the SuSE Enterprise Server 11 patch...

Firefox infoRSS扩展RSS源跨域脚本执行漏洞

BUGTRAQ ID: 37091 CVECAN ID: CVE-2009-4101 infoRSS是一款可以在状态栏显示RSS源的Firefox扩展。 infoRSS扩展没有正确地过滤RSS源中的description标签输入便用于渲染内容，用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla infoRSS 1.1.4.2 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-4152

Cross-site scripting XSS vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag...