CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, bu...

Gentoo Security Advisory GLSA 200408-18 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200408-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200408-18 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200408-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VCDGear 3.56 Build 050213 - FILE Local Code Execution

VCDGear 3.56 Build 050213 - FILE Local Code Execution / 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user to extract...

Alternative crack with Super king address plus the key of the VCD-vulnerability warning-the black bar safety net

This VCD disc are not in the computer CD drive, through Device Manager into the IT can not display any files. Even if can see only one side of the can. Below I will introduce a VCD encryption technology and crack method. Artificial disc bad sectors is the latest and most commonly used encryption...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

CVE-2006-4628

The CVE-2006-4628 entry documents a Cross-site scripting (XSS) vulnerability in VCD-db prior to version 0.983. The flaw allows remote attackers to inject arbitrary web script or HTML when handling comments. The exact vectors and affected components are not detailed beyond the comments handling as...

[SA21781] VCD-db Comments Script Insertion Vulnerability

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

CVE-2005-4241

Cross-site scripting XSS vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter...

CVE-2005-4240

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

CVE-2005-4241

Cross-site scripting XSS vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter...

CVE-2005-4241

The CVE-2005-4241 issue affects VCD-db 0.98 and earlier, with a Cross-site Scripting (XSS) vulnerability on the category page exploited via the batch parameter. Remote attackers could inject arbitrary script/HTML. This entry is supported by multiple sources noting XSS in VCD-db and the affected v...

CVE-2005-4240

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

CVE-2005-4240

Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...

VCD-db vuln.

VCD-db vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/vcd-db-vuln.html vendor: http://vcddb.konni.com/ affected version:V.0.98 and prior Product Description: VCD-db is a Free web based software that lets you manage your DVD/VCD/CDs collectio...

VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

VCD-db 0.9x Search Module - batch Cross-Site Scripting

VCD-db 0.9x Search Module - batch Cross-Site Scripting source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

xine-lib buffer overflows

buffer overflow in the PNM, VCD and DVD handling code...

GLSA-200408-18 : xine-lib: VCD MRL buffer overflow

The remote host is affected by the vulnerability described in GLSA-200408-18 xine-lib: VCD MRL buffer overflow xine-lib contains a bug where it is possible to overflow the vcd:// input source identifier management buffer through carefully crafted playlists. Impact : An attacker may construct a...