CVE-2008-1748

Cisco Unified Communications Manager (CUCM) versions 4.1/4.2/4.3/5.x/6.x suffer a DoS due to improper validation of SIP URLs, exploitable via a crafted SIP INVITE message (Bug CSCsl22355). Affected components include SIP handling; the issue is documented as CVE-2008-1748. The vulnerability may le...

Prozilla Top 100 1.2 - Arbitrary Delete Stats

--==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On...

CVE-2007-1737

Opera 9.10 is affected: URLs embedded in object or iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. Root cause is the failure to validate these embedded URLs. Impact is bypass of anti-phishing checks; explicit exploit details or in-the-...

Symantec Web Security多个拒绝服务和跨站脚本漏洞

Symantec Web Security安全产品不正确检查嵌入在HTML标记中，包含错误或者阻止页消息的返回给客户端的URL。 攻击者可以嵌入恶意命令到部分URL，客户端浏览器将执行恶意命令。目前没有详细漏洞细节提供。 Symantec Web Security 3.0.1 build 3.01.68 Symantec Web Security 3.0.1 build 3.01.67 Symantec Web Security 3.0.1 build 3.01.63 Symantec Web Security 3.0.1 build 3.01.62 Symantec Web...

Apache on Windows mod_alias URL Validation Canonicalization CGI Source Disclosure

The version of Apache for Windows running on the remote host can be tricked into disclosing the source of its CGI scripts because of a configuration issue. Specifically, if the CGI directory is located within the document root, then requests that alter the case of the directory name will bypass t...

CVE-2005-2757

CVE-2005-2757 affects Mac OS X and OS X Server 10.4–10.4.3. The issue is a heap-based buffer overflow in CoreFoundation, exploitable by remote attackers to run arbitrary code through how URLs are validated. The description in the connected documents confirms the vulnerability and affected compone...

CVE-2005-2757

Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."...

PunBB URL Quote Tag XSS

The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. With a specially-crafted URL...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

mfsa2005-47exploit.txt

// Exploit by Michael Krax Firewalling - Proof-of-Concept function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the real image got loaded window.setTimeout"window.stop",1000; Firewalling - Proof-of-Concept The "Set As Wallpaper" dialog takes...

Gallery is still vulnerable to Cross-site Scripting attacks

Hello, After testing out the updates to CVS for Gallery, I realized it is still vulnerable to the cross-site scripting attacks that was mentioned in the first advisory. The following code was committed to CVS: / Test for relative URL, which we know to be local. If URL contains :// assume that it'...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting attacks because the application does not validate URL and quote tags. With a specially crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a los...

CVE-2004-0199

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

MS04-015: Microsoft Help Center Remote Code Execution (840374)

The remote host contains bugs in the Microsoft Help and Support Center in the way it handles HCP URL validation. 840374 An attacker could use this bug to execute arbitrary commands on the remote host. To exploit this bug, an attacker would need to lure a user of the remote host into visiting a...

Microsoft Help and Support Center (HCP) fails to properly validate HCP URLs

Overview The Microsoft Help and Support Center HCP fails to properly handle HCP URL validation. Exploitation of this vulnerability may permit remote attackers to execute arbitrary code on the system with the privileges of the current user. Description Microsoft Windows XP and Server 2003 Help and...

ReBB javascripts vulnerability

Hi! Another php - board named ReBB http://www.rebb.net has a img vulnerability. Exploit: Use this string my favorite : - imgjavascript:alert'test'/img Possible decision: All urls in img tag should start with http:// SliderGod...

FloosieTek FTGate 2.1 - Web File Access

source: https://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web brows...