CVE-2009-1324

Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...

Zervit Webserver buffer overflow

Buffer overflow on oversized resource URI...

Zervit Webserver Buffer Overflow

Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Vend0r site: http://www.ohloh.net/projects/mereo / When requested uri isn't found,it goes to char tmp255, and later it is used to output,you need 256 chars ...

Miniweb Buffer Overflow

Miniweb Remote Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... / BoF when requesting URI longer than 120 / using System; using System.IO; using System.Net; using System.Text; namespace idiot class pf static void Mainstring arg...

CVE-2009-0993

Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...

Format string

Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...

CVE-2009-0993

Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...

CVE-2009-0993

CVE-2009-0993 is a format-string vulnerability in Oracle Application Server 10g’s OPMN daemon (opmn). A remote attacker can trigger arbitrary code execution by sending crafted HTTP POST requests that are logged by opmn.log, exploiting improper handling of format specifiers. Affected product is Or...

Zervit 0.02 Buffer Overflow

Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Vend0r site: http://www.ohloh.net/projects/mereo / When requested uri isn't found,it goes to char tmp255, and later it is used to output,you need 256 chars ...

Zervit Webserver 0.02 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================ Zervit Webserver 0.02 Remote Buffer Overflow PoC ================================================ Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Found with ServMeNot world's sexiest fuzzer :P In...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Subscriber Edge Services Manager SESM allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information...

CVE-2009-1287

CVE-2009-1287 concerns Cisco Subscriber Edge Services Manager (SESM) and describes a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents identify SESM as the affected product and specify the vulnerabilit...

Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Banshee 1.4.2 DAAP Extension - appswebvs_diag.cgi Cross-Site Scripting

Banshee 1.4.2 DAAP Extension - appswebvsdiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Mandriva Update for libneon0.26 MDKSA-2007:013 (libneon0.26)

Check for the Version of libneon0.26 OpenVAS Vulnerability Test Mandriva Update for libneon0.26 MDKSA-2007:013 libneon0.26 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for lynx MDVSA-2008:218 (lynx)

Check for the Version of lynx OpenVAS Vulnerability Test Mandriva Update for lynx MDVSA-2008:218 lynx Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for konqueror MDKSA-2007:176 (konqueror)

Check for the Version of konqueror OpenVAS Vulnerability Test Mandriva Update for konqueror MDKSA-2007:176 konqueror Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for inkscape MDKSA-2007:069 (inkscape)

Check for the Version of inkscape OpenVAS Vulnerability Test Mandriva Update for inkscape MDKSA-2007:069 inkscape Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdelibs MDKSA-2007:054 (kdelibs)

Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDKSA-2007:054 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-0796

Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI...