Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)

A stack buffer overflow vulnerability has been reported in Light Alloy media player. The vulnerability is due to a lack of boundary check when handling M3U files. Successful exploitation could allow arbitrary code execution in the context of the target user...

CVE-2013-6874

Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...

Stack overflow

Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...

CVE-2013-6874

Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...

CVE-2013-6874

CVE-2013-6874: A stack-based buffer overflow in Vortex Light Alloy prior to 4.7.4 allows remote attackers to execute arbitrary code via a long URL in an .m3u file. Affected: Vortex Light Alloy,

PT-2013-6163

Name of the Vulnerable Software and Affected Versions Vortex Light Alloy versions prior to 4.7.4 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long URL in a .m3u file. Recommendations For versions prior to 4.7.4, update to version 4.7.4 or...

CVE-2013-6874: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...

Ubuntu Update for linux-ti-omap4 USN-1202-1

Ubuntu Update for Linux kernel vulnerabilities USN-1202-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12021.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1202-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

USN-1164-1: Linux kernel vulnerabilities (i.MX51)

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly...

Ubuntu 9.10 : linux, linux-ec2 vulnerabilities (USN-1073-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

USN-1071-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that the Linux kernel did not properly implement exception fixup. A local attacker could exploit this to crash the kernel, leading to a denial of service. CVE-2010-3086 Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signednes...

FreeBSD Security Advisory (FreeBSD-SA-05:06.iir.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:06.iir.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Vortex CMS (index.php pageid) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Vortex CMS - Blind SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco GPM, Free-Hack &n...

Vortex CMS (index.php pageid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Vortex CMS index.php pageid Blind SQL Injection Exploit ========================================================= php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '...

Vortex CMS - pageid Blind SQL Injection

Vortex CMS - pageid Blind SQL Injection php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 =...

Vortex CMS - 'pageid' Blind SQL Injection

php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?pageid='.$argv2.''and+lengthselect+username+from+systemuserslogins+where+id='.$argv3.'='.$i.'/'; if strpos$temp1,'Sorry, the page you...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to 1 admincp/auth/secure.php or 2 admincp/auth/checklogin.php...

CVE-2007-5842

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to 1 admincp/auth/secure.php or 2 admincp/auth/checklogin.php...

Immunity Canvas: VPORTAL_INCLUDE

Name| vportalinclude ---|--- CVE| CVE-2007-5842 Exploit Pack| CANVAS Description| Vortex Portal remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: igamingcms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5842 CVE Name: CVE-2007-5842...

CVE-2007-5842

Vortex Portal 1.0.42 contains PHP remote file inclusion vulnerabilities. A URL in the cfgProgDir parameter can be used to reach (1) admincp/auth/secure.php or (2) admincp/auth/checklogin.php, enabling remote attackers to execute arbitrary PHP code. The documented impact is arbitrary code executio...