CVE-2009-2974

Removed by vendor...

CVE-2009-2974

CVE-2009-2974 (Google Chrome DoS) Affected software: Google Chrome versions 1.0.154.65, 1.0.154.48, and earlier. Vulnerability: Remote attackers can trigger denial of service by manipulating a chromehtml: URI value assigned to document.location, or by a sequence of function calls that set a chrom...

Directory traversal

Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Design/Logic Flaw

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

The CVE-2008-7070 entry describes an Argument injection vulnerability in the KVIrc 3.4.2 Shiny URI handler that allows remote attackers to execute arbitrary commands by supplying a quote followed by command line switches in URI schemes such as irc:///, irc6:///, ircs:///, or ircs6:///. This align...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2913

CVE-2009-2913 affects XZero Community Classifieds 4.97.8. A cross-site scripting (XSS) vulnerability exists in index.php that allows remote attackers to inject arbitrary script/HTML via the URI. According to NVD, impact is partial integrity impact with no confidentiality or availability impact; e...

CVE-2008-6995

Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service browser crash via a URI with an invalid handler followed by a "%" percent character, which triggers a buffer over-read, as demonstrated using an "about:%" URI...

CVE-2008-6995

Removed by vendor...

VLC Media Player 1.0.1 Buffer Overflow

!/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow Xpl By : Mountassif Moad Thanks : His0ka - Simo-soft - v4 Team Original : http://www.milw0rm.com/exploits/9427 popupmsg= "TY777777777777777777777777777777777QZjAXP0A0AkAAQ2AB2BB0"...

VLC Media Player <= 1.0.1 smb:// URI Handling Remote BOF Exploit

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow Xpl By : Mountassif Moad Thanks : His0ka - Simo-soft - v4 Team Original : http://www.milw0rm.com/exploits/9427 popupmsg=...

VLC Media Player URI Buffer Overflow

!/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 Thanks: Pankaj Kohli for finding this in 0.8.6f Original: http://www.milw0rm.com/exploits/9303 Crash Breakdown of vlc v1.0.1 on XP...

Cross site scripting

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.0\1.0.1 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 Thanks: Pankaj Kohli for finding this in 0.8.6f Original: http://www.milw0rm.com/exploits/9303 Crash...

VLC Media Player <= 1.0.1 smb:// URI Handling Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================ VLC Media Player \n" header1 += "\n" header1 += "\tPlaylist\n" header1 += "\t\n" header1 += "\t\t\n" header1 += "\t\t\tsmb://email protected/foo/" payload = "\x41" 2 + "\x42" ...