10509 matches found
CVE-2009-1326
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
CVE-2009-1329
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
Stack overflow
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
Stack overflow
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
Stack overflow
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
CVE-2009-1327
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
CVE-2009-1324
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...
Zervit Webserver Buffer Overflow
Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Vend0r site: http://www.ohloh.net/projects/mereo / When requested uri isn't found,it goes to char tmp255, and later it is used to output,you need 256 chars ...
Zervit Webserver buffer overflow
Buffer overflow on oversized resource URI...
Miniweb Buffer Overflow
Miniweb Remote Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... / BoF when requesting URI longer than 120 / using System; using System.IO; using System.Net; using System.Text; namespace idiot class pf static void Mainstring arg...
CVE-2009-0993
Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...
Format string
Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...
CVE-2009-0993
CVE-2009-0993 is a format-string vulnerability in Oracle Application Server 10g’s OPMN daemon (opmn). A remote attacker can trigger arbitrary code execution by sending crafted HTTP POST requests that are logged by opmn.log, exploiting improper handling of format specifiers. Affected product is Or...
CVE-2009-0993
Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable...
Zervit 0.02 Buffer Overflow
Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Vend0r site: http://www.ohloh.net/projects/mereo / When requested uri isn't found,it goes to char tmp255, and later it is used to output,you need 256 chars ...
Zervit Webserver 0.02 Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================ Zervit Webserver 0.02 Remote Buffer Overflow PoC ================================================ Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Found with ServMeNot world's sexiest fuzzer :P In...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Subscriber Edge Services Manager SESM allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information...
CVE-2009-1287
CVE-2009-1287 concerns Cisco Subscriber Edge Services Manager (SESM) and describes a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents identify SESM as the affected product and specify the vulnerabilit...
Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...
Banshee 1.4.2 DAAP Extension - appswebvs_diag.cgi Cross-Site Scripting
Banshee 1.4.2 DAAP Extension - appswebvsdiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...