Cross site scripting

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2913

CVE-2009-2913 affects XZero Community Classifieds 4.97.8. A cross-site scripting (XSS) vulnerability exists in index.php that allows remote attackers to inject arbitrary script/HTML via the URI. According to NVD, impact is partial integrity impact with no confidentiality or availability impact; e...

CVE-2008-6995

Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service browser crash via a URI with an invalid handler followed by a "%" percent character, which triggers a buffer over-read, as demonstrated using an "about:%" URI...

CVE-2008-6995

Removed by vendor...

VLC Media Player 1.0.1 Buffer Overflow

!/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow Xpl By : Mountassif Moad Thanks : His0ka - Simo-soft - v4 Team Original : http://www.milw0rm.com/exploits/9427 popupmsg= "TY777777777777777777777777777777777QZjAXP0A0AkAAQ2AB2BB0"...

VLC Media Player <= 1.0.1 smb:// URI Handling Remote BOF Exploit

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow Xpl By : Mountassif Moad Thanks : His0ka - Simo-soft - v4 Team Original : http://www.milw0rm.com/exploits/9427 popupmsg=...

VLC Media Player URI Buffer Overflow

!/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 Thanks: Pankaj Kohli for finding this in 0.8.6f Original: http://www.milw0rm.com/exploits/9303 Crash Breakdown of vlc v1.0.1 on XP...

Cross site scripting

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 Thanks: Pankaj Kohli for finding this in 0.8.6f Original: http://www.milw0rm.com/exploits/9303 Crash...

VLC Media Player <= 1.0.1 smb:// URI Handling Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================ VLC Media Player \n" header1 += "\n" header1 += "\tPlaylist\n" header1 += "\t\n" header1 += "\t\t\n" header1 += "\t\t\tsmb://email protected/foo/" payload = "\x41" 2 + "\x42" ...

VideoLAN VLC Media Player 1.0.01.0.1 - smb: URI Handling Buffer Overflow (PoC)

VideoLAN VLC Media Player 1.0.01.0.1 - smb: URI Handling Buffer Overflow PoC !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 Thanks: Pankaj Kohli for finding this in 0.8.6f Original:...

VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC

Exploit for unknown platform in category dos / poc ======================================================== VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC ======================================================== !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remot...

CVE-2008-6953

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long oovoo: URI...

KLA10422 ACE vulnerability in ooVoo

A buffer overflow was found in ooVoo. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URI. Original advisories - Exploitation Public exploits exist for this...

Chavoosh CMS SQL Injection Vulnerability

================= IUT-CERT ================= Title: Chavoosh CMS SQL Injection Vulnerability Vendor: www.chavoosh.com Dork: Design by chavoosh Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Chavoosh is a...

[SECURITY] Fedora 11 Update: libxml2-2.7.3-3.fc11

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 10 Update: libxml2-2.7.3-2.fc10

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...

Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...

CVE-2008-6937

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...