CVE-2010-0768

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2010-0768

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2010-1195

Cross-site scripting XSS vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI...

CVE-2010-1195

Cross-site scripting XSS vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI...

CVE-2010-1195

Cross-site scripting XSS vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI...

Skype URI Handling Buffer Overflow (CVE-2005-3265)

Skype is a peer-to-peer Voice over IP VoIP Internet telephony network solution. The product is used to transfer real time conversations between two peers over the Internet. Skype users can speak to other Skype users, receive calls from traditional phones, and receive voice-mail messages. There...

DSA-2020-1 ikiwiki - cross-site scripting

Bulletin has no description...

Skype URI参数处理多个安全漏洞

BUGTRAQ ID: 38699 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype在处理URI中的参数串时存在输入验证漏洞，远程攻击者可能利用此漏洞修改用户的配置或访问某些敏感信息。 URI中可能包含的/Datapath参数可以指向恶意的SMB共享，攻击者可以通过诱使用户点击恶意的skype: URI来利用漏洞。 此外Skype在处理skype-plugin:协议时也没有正确的过滤恶意URI参数，用户跟随恶意链接就可能导致删除任意指定的XML文件。 Skype 4.x 厂商补丁： Skype -----...

Skype multiple security vulnerabilities

Code execution and unauthorized files access on URI processing...

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-028 March 11, 2010 -- Affected Vendors: Skype -- Affected Products: Skype -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against...

Skype URI Handler Input Validation

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Skype URI Handler Input Validation Versions affected: All versions prior to 4.2.0.1.55 v4.2 hotfix 1 +-----------+ |Description| +-----------+ The Windows Skype client implements tw...

Skype < 4.2.0.155 URI Handler Security Vulnerability

Binary data 5362.prm...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (uncredentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (credentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Skype URI Handler Input Validation v4.2.0.1.55 Command Execution

Exploit for unknown platform in category remote exploits ================================================================ Skype URI Handler Input Validation v4.2.0.1.55 Command Execution ================================================================ Skype URI Handler Input Validation Versions...

Skype - URI Handler Input Validation

No description provided by source. Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Skype - URI Handler Input Validation

Skype - URI Handler Input Validation Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Skype URI Handler Input Validation

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Skype URI Handler Input Validation Versions affected: All versions prior to 4.2.0.1.55 v4.2 hotfix 1 +-----------+ |Description| +-----------+ The Windows...

Max Network Technology BBSMAX (threadid) Parameter XSS Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Max Network Technology BBSMAX threadid Parameter XSS Vulnerability ==================================================================== Vulnerable: Max Network Technology...

Skype - URI Handler Input Validation

Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI: command argument, followed by the use...