9025 matches found
tiff2pdf buffer overflow
Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...
Absolute path traversal Apache Tomcat WEBDAV
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...
IntelliTamper 2.07 (imgsrc) Remote Buffer Overflow Exploit
No description provided by source. / IntelliTamper 2.07 imgsrc Remote Buffer Overflow Expoit Discovered & Written by r0ut3r writ3r at gmail.com Many Thanks to Luigi Auriemma http://aluigi.org Greets to shinnai http://www.shinnai.net and Guido Landi IntelliTamper contains a remote buffer overflow...
CVE-2008-3219
The Drupal filterxssadmin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting XSS protection mechanism...
CVE-2008-3219
The vulnerability CVE-2008-3219 affects Drupal: the filter_xss_admin function in Drupal 5.x before 5.8 and 6.x before 6.3 does not prevent use of the object HTML tag in administrator input. Impact is not clearly defined in the provided documents, with unknown potential attack vectors and an indic...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to 1 the db parameter in the "Creating a Database" functionality dbcreate.php, and 2 the convcharset and collationconnection parameters related...
Absolute path traversal Apache Tomcat WEBDAV
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...
XSS using onerror
We had a user enter a viagra ad that actual redirected to their site. I think the offending code was here: although obviously they didn't use example.com I've attached the whole page for examination...
XSS using onerror
We had a user enter a viagra ad that actual redirected to their site. I think the offending code was here: although obviously they didn't use example.com I've attached the whole page for examination...
Code injection
Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...
CVE-2008-2552
Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...
CVE-2008-2552
CVE-2008-2552 affects Sun Solaris 10 and Sun Service Tag prior to 1.1.3. The issue arises in the Service Tag Registry and allows a local attacker to cause a denial of service (disk consumption) via unspecified vectors. Nessus plugins list patches 136839-01 for SPARC and 136840-01 for x86 as the r...
Qt BMP Parsing Bug Heap Overflow Exploit
No description provided by source. / heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps @hackaholic ok, pretty standard heap overflow here. we spill across our chunk and overwrite the boundary tag for next chunk. the only problems i had w...
Stack overflow
Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message...
Heap overflow
Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag...
CVE-2008-2407
Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message...
Exteen Blog XSS Remote Cookie Disclosure Exploit
========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...
Adobe Flash DefineSceneAndFrameLabelData Parsing Memory Corruption Vulnerability
TippingPoint Note: This issue was originally disclosed on April 8, 2008 as ZDI-08-022 but due to an error on our behalf the original advisory was clobbered and is now being re-released as ZDI-08-032. This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the...
w3m Vulnerability of Unauthorized Access to Files or Cookies
Overview w3m fails to properly escape HTML tags in the ALT attribute of an IMG tag, which could allow an attacker to access files or cookies. Impact An remote attacker could access files and cookies. Solution Please refer to the 'Vendor Information' section for official remediation and take...
