«
Expand/Collapse
210 items tagged "plugin"
Related tags:
imanager [+],
file upload [+],
sql injection [+],
mandriva linux [+],
vulnerabilities [+],
timthumb [+],
manager wordpress [+],
cache directory [+],
webapps [+],
universal [+],
post [+],
inclusion [+],
disclosure [+],
backwpup [+],
arbitrary html [+],
uninstall [+],
script code [+],
protocol [+],
proof of concept [+],
openjdk [+],
mysql [+],
icedtea [+],
code execution [+],
winamp [+],
video [+],
spamassassin [+],
sap [+],
recaptcha [+],
protocol analysis [+],
poc [+],
plugin v1 [+],
plugin dll [+],
packet analyzer [+],
nagios [+],
milter [+],
local buffer overflow [+],
irfanview [+],
ikiwiki [+],
ibrowser [+],
htmlscrubber [+],
forum [+],
flashpix [+],
file deletion [+],
exploits [+],
diag [+],
cve [+],
command execution [+],
based buffer overflow [+],
album gallery [+],
Related [+],
wp starsratebox [+],
utf 8 [+],
txt [+],
stack overflow [+],
stack based [+],
socialgrid [+],
social [+],
shell [+],
sermonbrowser [+],
recip [+],
random php [+],
plugin check [+],
netbeans [+],
mod [+],
mlfi [+],
memory function [+],
mandriva [+],
linux security [+],
lanoba [+],
jira [+],
igallery [+],
human [+],
https certificates [+],
gimp plugin [+],
gimp [+],
firefox [+],
file [+],
contact [+],
check ups [+],
check [+],
buffer overflow vulnerabilities [+],
arbitrary command [+],
zero day [+],
wpsc mijnpress [+],
wp cumulus [+],
window handle [+],
version [+],
transmission [+],
trackback [+],
tar gz [+],
system monitor [+],
sim im [+],
sieve [+],
serendipity [+],
safer use [+],
remote script [+],
reader plugin [+],
oscar [+],
myldlinker [+],
msn protocol [+],
msn [+],
joomla [+],
information disclosure vulnerability [+],
hijacking [+],
gkrellm [+],
freetag [+],
execution [+],
dovecot [+],
directory traversal vulnerability [+],
cumulus [+],
core design [+],
core [+],
buffer overflow vulnerability [+],
appointment [+],
application [+],
adrotate [+],
adobe reader [+],
activex plugin [+],
day [+],
wordpress plugin [+],
z vote [+],
z category [+],
xss [+],
xinha [+],
wpsc [+],
wp recaptcha [+],
whatweb [+],
webcam [+],
web plugin [+],
web application [+],
vote [+],
viewer plugin [+],
viewer [+],
users [+],
ups [+],
twitter [+],
thecartpress [+],
text widget [+],
tagninja [+],
stack buffer [+],
sql [+],
spyeye [+],
socialengine [+],
server plugin [+],
server [+],
security advisory [+],
search plugin [+],
search [+],
remote file include vulnerability [+],
remote [+],
relevanssi [+],
registration [+],
query field [+],
privacy [+],
polls [+],
plugin development [+],
player plugin [+],
php sql [+],
photo gallery [+],
penetration [+],
page parameter [+],
origin [+],
nucleus [+],
novell iprint [+],
new [+],
music [+],
mupdf [+],
munkyscripts [+],
multiple buffer overflow [+],
modul [+],
microphone [+],
mcfilemanager [+],
manager ezpmutils [+],
manager ez [+],
malicious attacker [+],
macgurublog [+],
listing [+],
jquery [+],
jetty web [+],
jetty [+],
icedtea web [+],
heap [+],
global search [+],
global [+],
geeklog [+],
forgery [+],
flv player [+],
flowplayer [+],
flagshow [+],
firefox plugin [+],
eventify [+],
event registration [+],
event id [+],
event [+],
email [+],
eclipse [+],
downloads [+],
donation [+],
document [+],
destination buffer [+],
contus [+],
content management systems [+],
configuration [+],
commerce [+],
code [+],
bugtraq [+],
browser [+],
blog [+],
adobe viewer [+],
adobe [+],
adminimize [+],
absolute privacy [+],
Skype [+],
plugin version [+],
cross site scripting [+],
site [+],
cross [+],
vulnerability [+],
wordpress [+]
-
-
13:43
»
Packet Storm Security Exploits
A vulnerability in the IrfanView FlashPix plugin exists due to the "Free_All_Memory()" function not properly setting certain decoder elements to NULL after freeing them, which can be exploited to cause a double-free condition via specially crafted FPX images. Proof of concept exploit included.
-
13:43
»
Packet Storm Security Recent Files
A vulnerability in the IrfanView FlashPix plugin exists due to the "Free_All_Memory()" function not properly setting certain decoder elements to NULL after freeing them, which can be exploited to cause a double-free condition via specially crafted FPX images. Proof of concept exploit included.
-
13:43
»
Packet Storm Security Misc. Files
A vulnerability in the IrfanView FlashPix plugin exists due to the "Free_All_Memory()" function not properly setting certain decoder elements to NULL after freeing them, which can be exploited to cause a double-free condition via specially crafted FPX images. Proof of concept exploit included.
-
-
15:24
»
Packet Storm Security Advisories
Mandriva Linux Security Advisory 2011-183 - When receiving various stanzas related to voice and video chat, the XMPP protocol plugin failed to ensure that the incoming message contained all required fields, and would crash if certain fields were missing. When receiving various messages related to requesting or receiving authorization for adding a buddy to a buddy list, the oscar protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. When receiving various incoming messages, the SILC protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. This update provides pidgin 2.10.1, which is not vulnerable to these issues.
-
15:24
»
Packet Storm Security Recent Files
Mandriva Linux Security Advisory 2011-183 - When receiving various stanzas related to voice and video chat, the XMPP protocol plugin failed to ensure that the incoming message contained all required fields, and would crash if certain fields were missing. When receiving various messages related to requesting or receiving authorization for adding a buddy to a buddy list, the oscar protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. When receiving various incoming messages, the SILC protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. This update provides pidgin 2.10.1, which is not vulnerable to these issues.
-
15:24
»
Packet Storm Security Misc. Files
Mandriva Linux Security Advisory 2011-183 - When receiving various stanzas related to voice and video chat, the XMPP protocol plugin failed to ensure that the incoming message contained all required fields, and would crash if certain fields were missing. When receiving various messages related to requesting or receiving authorization for adding a buddy to a buddy list, the oscar protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. When receiving various incoming messages, the SILC protocol plugin failed to validate that a piece of text was UTF-8. In some cases invalid UTF-8 data would lead to a crash. This update provides pidgin 2.10.1, which is not vulnerable to these issues.
-
-
14:41
»
Packet Storm Security Recent Files
SAP DIAG Plugin extends the basic functionality of the WireShark network packet analyzer and provides additional features of SAP DIAG protocol analysis. This extension allows one to collect and decompress SAP DIAG packets in the course of interaction between SAP Front-end client software and SAP application servers. To install you must copy plugin pt_sap_diag_wireshark_plugin.dll in folder %WiresharkInstallDir%/plugins/%version%.
-
14:41
»
Packet Storm Security Recent Files
SAP DIAG Plugin extends the basic functionality of the WireShark network packet analyzer and provides additional features of SAP DIAG protocol analysis. This extension allows one to collect and decompress SAP DIAG packets in the course of interaction between SAP Front-end client software and SAP application servers. To install you must copy plugin pt_sap_diag_wireshark_plugin.dll in folder %WiresharkInstallDir%/plugins/%version%.
-
14:41
»
Packet Storm Security Misc. Files
SAP DIAG Plugin extends the basic functionality of the WireShark network packet analyzer and provides additional features of SAP DIAG protocol analysis. This extension allows one to collect and decompress SAP DIAG packets in the course of interaction between SAP Front-end client software and SAP application servers. To install you must copy plugin pt_sap_diag_wireshark_plugin.dll in folder %WiresharkInstallDir%/plugins/%version%.
-
14:41
»
Packet Storm Security Misc. Files
SAP DIAG Plugin extends the basic functionality of the WireShark network packet analyzer and provides additional features of SAP DIAG protocol analysis. This extension allows one to collect and decompress SAP DIAG packets in the course of interaction between SAP Front-end client software and SAP application servers. To install you must copy plugin pt_sap_diag_wireshark_plugin.dll in folder %WiresharkInstallDir%/plugins/%version%.
-
18:00
»
Packet Storm Security Exploits
iGallery plugin version 1.0.0 suffers from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in '/scripts/pthumb/demo/phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
18:00
»
Packet Storm Security Recent Files
iGallery plugin version 1.0.0 suffers from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in '/scripts/pthumb/demo/phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
18:00
»
Packet Storm Security Misc. Files
iGallery plugin version 1.0.0 suffers from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in '/scripts/pthumb/demo/phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
17:56
»
Packet Storm Security Exploits
iManager plugin versions 1.2.8 build 02012008 and below suffer from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in 'random.php' and 'phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
17:56
»
Packet Storm Security Recent Files
iManager plugin versions 1.2.8 build 02012008 and below suffer from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in 'random.php' and 'phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
17:56
»
Packet Storm Security Misc. Files
iManager plugin versions 1.2.8 build 02012008 and below suffer from a cross site scripting vulnerability when parsing user input to the 'dir' parameter via GET method in 'random.php' and 'phpThumb.demo.random.php'. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.
-
14:29
»
SecuriTeam
The Related Posts WordPress Plugin contains a Cross Site Scripting Vulnerability.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
14:29
»
SecuriTeam
The WordPress Recaptcha Plugin contains a Cross Site Scripting Vulnerability.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
15:22
»
Packet Storm Security Advisories
Mandriva Linux Security Advisory 2011-103 - Stack-based buffer overflow in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long Foreground field in a plugin configuration file.
-
15:22
»
Packet Storm Security Recent Files
Mandriva Linux Security Advisory 2011-103 - Stack-based buffer overflow in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long Foreground field in a plugin configuration file.
-
15:22
»
Packet Storm Security Misc. Files
Mandriva Linux Security Advisory 2011-103 - Stack-based buffer overflow in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Stack-based buffer overflow in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long Foreground field in a plugin configuration file.
-
-
21:01
»
Packet Storm Security Recent Files
Zero Day Initiative Advisory 10-207 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle's Java platform that utilize the ActiveX Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the plugin initializes objects. While the plugin is in a particular state, the application will fail to initialize a field that is used as a window handle. Exploitation can lead to code execution under the privileges of the application.
-
21:00
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 10-207 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle's Java platform that utilize the ActiveX Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the plugin initializes objects. While the plugin is in a particular state, the application will fail to initialize a field that is used as a window handle. Exploitation can lead to code execution under the privileges of the application.
-
-
12:01
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 10-139 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Novell iPrint Client browser plugin. User interaction is required in that a target must visit a malicious web page. The specific flaw exists within handling plugin parameters. The application does not properly verify the name of parameters passed via <embed> tags. If a malicious attacker provides a long enough value a destination buffer can be overflowed. Successful exploitation leads to execution of arbitrary code under the context of the user owning the browser process.
-
-
13:58
»
Packet Storm Security Recent Files
Mandriva Linux Security Advisory 2010-085 - The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for ICQ and possibly AIM, as demonstrated by the SIM IM client. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Other issues have also been identified.
-
13:58
»
Packet Storm Security Advisories
Mandriva Linux Security Advisory 2010-085 - The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for ICQ and possibly AIM, as demonstrated by the SIM IM client. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Other issues have also been identified.
-
-
21:36
»
Packet Storm Security Misc. Files
Document on how to research and develop plugins for WhatWeb to identify content management systems, web application frameworks, etc. As an example it includes how to research and write a plugin for the SilverStripe CMS. The document covers passive plugin development only and is accurate for WhatWeb version 0.4.