Code injection

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

CVE-2008-3648 affects nslookup.exe in Microsoft Windows XP SP2. The provided OpenVAS entries describe a remote code execution (RCE) vulnerability in Windows XP SP2, triggered by how nslookup.exe handles DNS operations (e.g., a DNS zone transfer). The NVD entry corroborates an RCE scenario with us...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

PCI DSS compliance

Binary data pcicompliance.nbin...

Unfixed XSS vulnerability at zone-m.net

Security researcher SeYMeN, has submitted on 08/06/2008 a cross-site-scripting XSS vulnerability affecting zone-m.net, which at the time of submission ranked 1309237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

munky-lfi.txt

================================================================================ | | | | | | | | | | | | | | | ' | | '/ | | || | | |/ \ | | | | | | | | | | | | | | || || | / | | || || |||| ,| |, || | | |/ | | | | / | | | | \ \ / / | | | | '| | | | | | | | | / | || | | | | || || | | | |/...

mUnky 0.0.1 - zone Local File Inclusion

mUnky 0.0.1 - zone Local File Inclusion @===========================================@ | Author = StAkeR [email protected] | @===========================================@ + + @===========================================@ | mUnky 0.0.1 = Local File Inclusion Vuln |...

mUnky 0.0.1 (index.php zone) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== mUnky 0.0.1 index.php zone Local File Inclusion Vulnerability =============================================================== @email protected | mUnky 0.0.1 = Local File...

mUnky 0.0.1 - 'zone' Local File Inclusion

@===========================================@ | Author = StAkeR [email protected] | @===========================================@ + + @===========================================@ | mUnky 0.0.1 = Local File Inclusion Vuln | @===========================================@ |...

Moderate: Red Hat Security Advisory: IBMJava2 security update

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

RHEL 2.1 : IBMJava2 (RHSA-2008:0133)

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

CVE-2008-2306

Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTIONSHELLEXECUTEHIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files...

MS Internet Explorer URL Injection in History List (MS04-004)

No description provided by source. // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands...

MS Internet Explorer (<= XP SP2) HTML Help Control Local Zone Bypass

No description provided by source. // sp2rc.htm // OBJECT id="localpage" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" height=7% style="position:absolute;top:140;left:72;z-index:100;" codebase="hhctrl.ocxVersion=5,2,3790,1194" width="7%"...

Unfixed XSS vulnerability at www.zone-h.com.cn

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.zone-h.com.cn, which at the time of submission ranked 1290874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is currently...