CVE-2007-0921

Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI...

CVE-2007-0919

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server MiniWebsvr 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in Quick Digital Image Gallery Qdig 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI...

CVE-2006-6978

The CVE-2006-6978 entry describes a Cross-site Scripting (XSS) vulnerability in FCKEditor’s "Basic Toolbar Selection". The issue allows an attacker to trigger arbitrary JavaScript via the javascript: URI in the href or onmouseover attributes of an A tag. Affected component is FCKEditor’s Basic To...

CVE-2006-6978

Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...

Stack overflow

Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Gom Player buffer overflow

Buffer oveflow on oversized ref href URI in ASX file...

GLSA-200701-22 : Squid: Multiple Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-22 Squid: Multiple Denial of Service vulnerabilities Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact : An attacker could...

Squid: Multiple Denial of Service vulnerabilities

Background Squid is a multi-protocol proxy server. Description Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact An attacker could attempt to retrieve a specially crafted URI via a Squid server causi...

Weaknesses in Pingback Design

Advisory: Weaknesses in Pingback Design Advisory ID: 4tphi-sa-20070111-pingback Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: Multiple Impact: Remote DoS Overview: From Wikipedia, "A Pingback is one of three types of Linkbacks, methods for Web authors to request...

Format string

Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...

Transmit “sftp://” URI处理器堆溢出漏洞

Transmit是MAC OS X平台上的FTP客户程序，可以执行基本的FTP操作。 Transmit在处理sftp:// URI时存在堆溢出漏洞，远程攻击者可以通过构造超长字符串来触发这个溢出，导致执行任意指令，可能控制用户机器。 Panic Transmit 3.5.5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.panic.com/transmit/index.html !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"...

CVE-2007-0021

Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...

MOAB-20-01-2007: Apple iChat aim:// URL Handler Format String Vulnerability

Summary Description from the Wikipedia article: AOL Instant Messenger AIM, ICQ, .Mac and Jabber client for Mac OS X. Using a Jabber-like protocol and Bonjour for user discovery, it also allows for LAN communication. iChat's AIM support is fully endorsed by AOL, and uses their official...

Apple Mac OS X transmit.app buffer overflow

Buffer overflow on ftps:// URI parsing...

Apple iChat format string vulnerability

Format string vulnerability on aim:// URI parsing...

arsdigita-traverse.txt

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...

Directory Traversal in ArsDigita Community System

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...

CVE-2007-0383

CVE-2007-0383 concerns WDaemon 9.5.4, where remote attackers can access the "/WorldClient.dll" URI on TCP port 3000. The impact is described as unknown in the sources, with the vendor reportedly stating this is not a security bug. The connected documents provide concrete details about the affecte...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...