CVE-2008-6283

Cross-site scripting XSS vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."...

Fedora Update for libid3tag FEDORA-2008-3976

Check for the Version of libid3tag OpenVAS Vulnerability Test Fedora Update for libid3tag FEDORA-2008-3976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for libid3tag FEDORA-2008-3874

Check for the Version of libid3tag OpenVAS Vulnerability Test Fedora Update for libid3tag FEDORA-2008-3874 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for wireshark FEDORA-2008-2941

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2008-2941 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Amaya Web Editor XML and HTML parser Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser...

Amaya Web Editor 11.0 - XML / HTML Parser

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser vulnerabilities Advisory ID: CORE-2008-1211...

Internet Explorer XML data binding memory corruption

Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...

Stack overflow

Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags...

[SECURITY] Fedora 8 Update: lynx-2.8.6-12.fc8

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays webpages...

MDaemon Server < 10.0.2 WordClient Script Insertion Vulnerability

MDaemon is prone to a script insertion vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:altn:mdaemon"; ifdescriptio...

vim format string flaw

Format string vulnerability in the helptagsone function in src/excmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command...

amaya -- multiple buffer overflow vulnerabilities

Secunia reports: A boundary error when processing "div" HTML tags can be exploited to cause a stack-based buffer overflow via an overly long "id" parameter. A boundary error exists when processing overly long links. This can be exploited to cause a stack-based buffer overflow by tricking the user...

VideoScript 3.0 4.1.5.55 - Unofficial Shell Injection

VideoScript 3.0 4.1.5.55 - Unofficial Shell Injection ?php ============================================= = x VideoScript 3.0 = 4.1.5.55 Unofficial Shell Injection Exploit = = x by G4N0K = ============================================= errorreportingEALL; $G4N0K...

CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash

CUPS 1.3.7 - Cross-Site Request Forgery Add RSS Subscription Remote Crash // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i"; / TESTED ON: Ubuntu 8.04.1 fully patched as of 19th Oct 2008 Linux...

Microsoft XML Core Services Nested Tag (MS08-069; CVE-2007-0099)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. A remote code execution vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due to...

fresh email script 1.0 - Multiple Vulnerabilities

fresh email script 1.0 - Multiple Vulnerabilities 1. +-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5...

CVE-2008-4871

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

Cross site scripting

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

CVE-2008-4871

Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...

CVE-2008-4871

CVE-2008-4871 is an XSS vulnerability affecting My Little Forum 1.75 and 2.0 Beta 23, exploitable via BBCode IMG tags to inject arbitrary script/HTML. Affected component is the forum software’s input parsing for BBCode IMG usage; underlying root cause details are not provided in the connected doc...