Elecard AVC_HD/MPEG Player version 5.7 buffer overflow exploit that creates a malicious .m3u file.
151cb9683bc748c89729e4a7d9ff9899705e86242415ca9adc024ad7ffc0970cDebian Linux Security Advisory 2174-1 - It was discovered that avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service.
acf57aa474c9e0a972bc5304081c6c8a38e3bdc75a80db8de3551e80ad353db9Debian Linux Security Advisory 2173-1 - It was discovered that pam-pgsql, a PAM module to authenticate using a PostgreSQL database, was vulnerable to a buffer overflow in supplied IP-addresses.
a773515080d918069fddd0d729fb6dd2bba81f653c5fed54597a45158784372ccoRED (Cows Online Redaktionssystem) CMS suffers from a remote SQL injection vulnerability.
fa675e9a36ad79d9c5f0d8d323221832a5778b9394ed6e314da5dbab7697b40dMovavi VideoSuite version 8.0 Create Slideshow buffer overflow exploit.
c0b135cf05eb86501d0d23b86e34cc7375ecf853ca99ebdea0d0559a7da03f76MS Visual Studio version 9.0 stack buffer overflow exploit that creates a malicious .vbproj file.
0b480d40a2331f5df4b4c655501576b71654c242ed718a3ef53273dbb6a1fb8eMS Visual Studio version 9.0 stack buffer overflow exploit that creates a malicious .csproj file.
74b3656d556261d7be4e14ff5953aae3bd6a6b281eb5bbf605d302e0a7341cb7DivX Player 'Skins' versions 6.8.2.1 and below buffer overflow exploit that creates a malicious .dps file.
8bb8d34ee72d5ad9c02643ea241a8334a8440315b79418f3e40f6edb2fdfe817KMPlayer 'Skins' versions 2.9.3.1 and below buffer overflow exploit that creates a malicious .ksf file.
09ce70f4a113b96bc0354c7cf7813bdfa388168de31a5659bd6b66d26dbf3074JetAudio 'Skins' versions 5.1.5.2 and below buffer overflow exploit that creates a malicious .jsk file.
bd748193bbbf0c7503296498530857cc7fd5b68c0834d379f503f83054734da4AspX suffers from a remote XML inclusion vulnerability in liste.swf.
197774490414b5b04762408e32f672385375f62b433c29ed70ccb688ec522204VLC Media Player version 0.8.6 ftp:// URI handler .xspf file buffer overflow exploit and advisory.
f35ea82345bcb20494c22fdfa59ee201ea2818efeb230d3eb92e10d7b9c5e656MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.
00e0125c2895877b555872647b0a98d13838a54acda78614bb6c6e70daadabc6The Refractor 2 engine versions 1.50 and below suffer from a NULL pointer dereference vulnerability. Games such as Battlefield 2 and Battlefield 2142 are affected. Proof of concept code included.
c5154e86267664abbb20e9158985659f81c3f2ecfab82bcf19c80337dcd43227PhreeBooks version R30RC4 suffers from a local file inclusion vulnerability.
b7c5789bbb2921bd6de523d5ab79a940339fabdeb8d94853c552e0b3e515caf1PhreeBooks version R30RC4 suffers from a cross site scripting vulnerability.
a6b8d10ab6619fac3f4bc76d477b5e1890563a6d14ff85469043e0123765b293WordPress ComicPress Manager version 1.4.9.9 suffers from a cross site scripting vulnerability.
e5450a5a4e077bc04451a78989b888ddeec04caaf5007763438e4e8b568b4952WordPress IGIT Posts Slider Widget 1.0 suffers from a cross site scripting vulnerability.
bbe2057392caf862c9d3e71dd9caad522ffd2b1ec179adadef214733105d42e1WordPress jQuery Mega Menu version 1.0 suffers from a local file inclusion vulnerability.
17fa7e534d41496514cf6464add06e0d2b540f8383c91fccd02c1be67c4ef773WordPress Local Market Explorer version 3.1.1 suffers from a cross site scripting vulnerability.
a4b01e718b3386bd70edb7ce42f8f07b3eb573ef54340535199c9033a1b61915WordPress OPS Old Post Spinner version 2.2 suffers from a local file inclusion vulnerability.
90ad721ad32aedc724e0e2b8821a1b2a8799469895fa5c47a8695d896aae6307WordPress PG Flash Gallery version 4.1.1 suffers from a cross site scripting vulnerability.
3f427ed1d7171406cb2b3371554f6c371a26c729c20e3faf5bff54c723bec636WordPress PhotoSmash version 1.0.2 suffers from a cross site scripting vulnerability.
5b9f04f2783eb3ed505cb32ec9ccd3d9a98f5c9ec304584a153e3fe9818666f7WordPress WPhone version 1.5.2 suffers from a cross site scripting vulnerability.
f9d547194444eb0eee36ac7f489eb2c8509848f4dfa166cffc11129ddb61b16bWordPress YT-Audio version 1.7 suffers from a cross site scripting vulnerability.
8462f2ce46970b28e4f00b8d6f9456d84febf6fda7f59767cbabce49a7f40c63
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed