10575 matches found
CVE-2010-3747
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2010-3980
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI...
RealNetworks RealPlayer ActiveX Control CDDA URI Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists during the parsing of long CDDA URIs due to a failure...
ki Wiki CMS groupware local file include and cross-site scripting vulnerability-vulnerability warning-the black bar safety net
The attacker can through the browser to exploit these issues. The use of a cross-site scripting issues, an attacker must entice an unsuspecting user to click on a malicious URI. The local file vulnerability EXP: the http:// 网站...
PHP 5.3.x < 5.3.4 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
CVE-2010-2950
CVE-2010-2950 is a format-string vulnerability in the PHP phar extension (stream.c/phar_stream_flush) affecting PHP 5.3.x up to 5.3.3. It allows context-dependent attackers to disclose memory contents and potentially execute arbitrary code via a crafted phar:// URI. The issue is noted as stemming...
CVE-2010-3306
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
OpenX - 'banner-edit.php' Arbitrary File Upload / PHP Code Execution (Metasploit)
$Id: openxbanneredit.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2010-3455
Cross-site scripting XSS vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter...
CVE-2010-3455
Cross-site scripting XSS vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter...
VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Remote Stack Overflow PoC
No description provided by source. !/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link:...
VLC Media Player smb:// URI Remote Stack Overflow
!/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: http://sourceforge.net/projects/vlc/files/1.1.4/win32/vlc-1.1.4-win32.exe/download?usemirror=garr Version: VLC Media...
VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Stack Overflow PoC
Exploit for python platform in category dos / poc ======================================================================= VLC Media Player 1.1.4 .xspf smb:// URI Handling Stack Overflow PoC ======================================================================= !/usr/bin/python Exploit Title: VLC...
VideoLAN VLC Media Player 1.1.4 - .xspf smb: URI Handling Remote Stack Overflow (PoC)
VideoLAN VLC Media Player 1.1.4 - .xspf smb: URI Handling Remote Stack Overflow PoC !/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link:...
VideoLAN VLC Media Player < 1.1.4 - '.xspf smb://' URI Handling Remote Stack Overflow (PoC)
!/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: http://sourceforge.net/projects/vlc/files/1.1.4/win32/vlc-1.1.4-win32.exe/download?usemirror=garr Version: VLC Media...
Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting
Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...
Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution
Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input...
Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution
source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to inject and execute arbitrary JSP...
Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow
This module exploits a buffer overflow in Apple QuickTime 7.6.6. When processing a malformed SMIL uri, a stack-based buffer overflow can occur when logging an error message. Module Options msf use exploit/windows/browser/apple/quicktimesmildebug msf undefinedquicktimesmildebug show actions...
uzbl uzbl-core - @SELECTED_URI Mouse Button Bindings Command Injection
uzbl uzbl-core - @SELECTEDURI Mouse Button Bindings Command Injection source: https://www.securityfocus.com/bid/42297/info uzbl 'uzbl-core' is prone to a vulnerability that lets attackers inject arbitrary commands because the application fails to adequately sanitize user-supplied input. This issu...