CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

PCI DSS compliance

Binary data pcicompliance.nbin...

Unfixed XSS vulnerability at zone-m.net

Security researcher SeYMeN, has submitted on 08/06/2008 a cross-site-scripting XSS vulnerability affecting zone-m.net, which at the time of submission ranked 1309237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

munky-lfi.txt

================================================================================ | | | | | | | | | | | | | | | ' | | '/ | | || | | |/ \ | | | | | | | | | | | | | | || || | / | | || || |||| ,| |, || | | |/ | | | | / | | | | \ \ / / | | | | '| | | | | | | | | / | || | | | | || || | | | |/...

mUnky 0.0.1 - zone Local File Inclusion

mUnky 0.0.1 - zone Local File Inclusion @===========================================@ | Author = StAkeR [email protected] | @===========================================@ + + @===========================================@ | mUnky 0.0.1 = Local File Inclusion Vuln |...

mUnky 0.0.1 (index.php zone) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== mUnky 0.0.1 index.php zone Local File Inclusion Vulnerability =============================================================== @email protected | mUnky 0.0.1 = Local File...

mUnky 0.0.1 - 'zone' Local File Inclusion

@===========================================@ | Author = StAkeR [email protected] | @===========================================@ + + @===========================================@ | mUnky 0.0.1 = Local File Inclusion Vuln | @===========================================@ |...

Moderate: Red Hat Security Advisory: IBMJava2 security update

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

RHEL 2.1 : IBMJava2 (RHSA-2008:0133)

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

CVE-2008-2306

Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTIONSHELLEXECUTEHIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files...

MS Internet Explorer (<= XP SP2) HTML Help Control Local Zone Bypass

No description provided by source. // sp2rc.htm // OBJECT id="localpage" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" height=7% style="position:absolute;top:140;left:72;z-index:100;" codebase="hhctrl.ocxVersion=5,2,3790,1194" width="7%"...

MS Internet Explorer URL Injection in History List (MS04-004)

No description provided by source. // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands...

Unfixed XSS vulnerability at www.zone-h.com.cn

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.zone-h.com.cn, which at the time of submission ranked 1290874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is currently...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

bind security, bug fix, and enhancement update

30:9.3.4-6.P1 - final 5.2 version - minor changes in initscript - improved patches for 250744 and 250901 30:9.3.4-5.P1 - improved patch to handle D-BUS races 240876 - updated named.root zone to affect root IPv6 migration 30:9.3.4-4.P1 - improved fix for 253537, posttrans script is now used - do n...

Vulnerability involving security zone handling in applications using Internet Explorer components

Overview Internet Explorer IE components apply different security levels for web content processing depending on the location zone of the web content. As a result, web content on the Internet is processed in the "Internet" zone with a higher security level than that set for web content in the...

Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone

Overview Sleipnir is a tabbed web browser developed in Japan by Fenrir & Co. Sleipnir RSS bar contains a vulnerability that RSS data is handled in an inappropriate security zone My Computer zone. Impact An arbitrary script could be executed in an inappropriate security zone. Solution None...