mpg123 vulnerabilities

In 2003, two vulnerabilities were discovered in mpg123 that could result in remote code execution when using untrusted input or streaming from an untrusted server...

[SNS Advisory No.58] Microsoft IIS Local Cross-site Scripting Vulnerability

---------------------------------------------------------------------- SNS Advisory No.58 Microsoft IIS Local Cross-site Scripting Vulnerability Problem first discovered: Tue, 28 May 2002 Published: Tue, 5 Nov 2002 Reference: http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html...

Gallery includedir Parameter Remote File Inclusion

The version of Gallery installed on the remote host is affected by a remote file inclusion vulnerability due to the application failing to properly sanitize user-supplied input to the 'includedir' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shel...

mIRC 6.0 - Scripting ASCTime Buffer Overflow

source: https://www.securityfocus.com/bid/5576/info mIRC is a chat client for the IRC protocol, designed for Microsoft Windows based operating systems. mIRC includes support for a scripting language. A buffer overflow vulnerability has been reported in the $asctime identifier, a function in the...

CVE-2000-0594

BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters...

CVE-2024-36361

Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would...