795 matches found
3ivx MPEG-4 < 5.0.2 Buffer Overflow
The 3ivx MPEG-4 compression suite is installed on the remote host. It contains an MP4 codec for use with media players such as Windows Media Player for creating and playing back MPEG-4 / MP4 files. The version of this codec on the remote host is affected by a buffer overflow vulnerability. If an...
ace-sql.txt
--==+================================================================================+==-- --==+ Ace Image Hosting Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: N/A...
Mozilla Foundation Security Advisory 2007-32
Mozilla Foundation Security Advisory 2007-32 Title: File input focus stealing vulnerability Impact: Moderate Announced: October 18, 2007 Reporter: hong, Charles McAuley Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description A user on the Sla.ckers.org forums named hong...
vanilla-sql.txt
= 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default LUM\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-...
phpmyadmin -- cross-site scripting vulnerability
The DigiTrust Group discovered serious XSS vulnerability in the phpMyAdmin serverstatus.php script. According to their report vulnerability can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site...
USN-497-1: xfce4-terminal vulnerability
Lasse Kärkkäinen discovered that the Xfce Terminal did not correctly escape shell meta-characters during "Open Link" actions. If a remote attacker tricked a user into opening a specially crafted URI, they could execute arbitrary commands with the user's privileges...
JVN#66303599 WebCart cross-site scripting vulnerability
WebCart provided by CGI's is shopping cart software. WebCart's management interface contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version provided by the vendor. For more...
Live for Speed S1/S2/Demo (.mpr replay file) Buffer Overflow Exploit
No description provided by source. / 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to...
AIX lsmcode privilege escalation
User's environment variable is used to launch external application...
Mozilla Thunderbird < 1.5.0.10 Multiple Vulnerabilities
The remote version of Mozilla Thunderbird suffers from various security issues, one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid24748; scriptversion"1.26";...
Google Desktop unauthorized access
By using google.com crossite scripting it's possible to take control under user's system...
Critical: Firefox security update
1.5.0.10-0.1.el4.0.1 - Replace default bookmarks and prefs 1.5.0.10-0.1.el4 - Update to 1.5.0.10 RC 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible...
USN-426-1: Ekiga vulnerabilities
Mu Security discovered a format string vulnerability in Ekiga. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges...
JVN#80271113 MODx cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected MODx 0.9.2.x and earlier...
Adobe Acrobat Reader Plugin 7.0.x - 'acroreader' Cross-Site Scripting
Stefano Di Paola http://www.wisec.it/ From Secunia: Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users. This can be exploited to execute arbitrary script code in a user's browser session in context of an affected site. Example: -...
HP OpenVMS information leak
Under some condition user's pasword may be logged by NET$SESSIONCONTROL module...
Memory corruption with simultaneous events — Mozilla
Secunia Research has discovered a vulnerability in Mozilla Firefox 1.5 branch, which can be exploited by malicious people to compromise a user's system...
GreatDomainsXSS.txt
GreatDomains.com - XSS with cookie disclosure ---------------------------------------------- Type: Cross site scripting Date: June, 16th 2006 ---------------------------------------------- Credits: ---------------------------------------------- Discovered by: David "Aesthetico" Vieira-Kurz...
Jaguarsoft JEdit ActiveX information leak
It's possible to retrieve sensitive information about user's computer...
palm.txt
Palm.com - XSS vulnerability ---------------------------------------------- Type: Cross site scripting Date: June, 13th 2006 ---------------------------------------------- Credits: ---------------------------------------------- Discovered by: David "Aesthetico" Vieira-Kurz...