t-online.de - Nachrichten - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application t-online.de - Nachrichten published at the 'play' market has multiple vulnerabilities...

Tivizen DVB-T Wi-Fi - Exported components, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Tivizen DVB-T Wi-Fi published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21726: Email Messages Distributing Malicious Software on March 15, 2016

Medium Alert ID: 44132 First Published: 2016 March 15 18:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21726 may contain the following files: Name | Si...

Debian DSA-3505-1 : wireshark - security update

Multiple vulnerabilities were discovered in the dissectors/parsers for Pcapng, NBAP, UMTS FP, DCOM, AllJoyn, T.38, SDP, NLM, DNS, BED, SCTP, 802.11, DIAMETER, VeriWave, RVSP, ANSi A, GSM A, Ascend, NBAP, ZigBee ZCL and Sniffer which could result in denial of service. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 3505-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3505-1 (wireshark - security update)

Multiple vulnerabilities were discovered in the dissectors/parsers for Pcapng, NBAP, UMTS FP, DCOM, AllJoyn, T.38, SDP, NLM, DNS, BED, SCTP, 802.11, DIAMETER, VeriWave, RVSP, ANSi A, GSM A, Ascend, NBAP, ZigBee ZCL and Sniffer which could result in denial of service. OpenVAS Vulnerability Test $I...

DSA-3505-1 wireshark - security update

Bulletin has no description...

besser.tsoa.nyu.edu XSS vulnerability

Vulnerable URL: http://besser.tsoa.nyu.edu/T-Shirts/index.cgi?type=or=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

investor.t-mobile.com Open Redirect vulnerability

Vulnerable URL: http://investor.t-mobile.com/PDFPageView.aspx?iid=4091145=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP website...

t-vec.com XSS vulnerability

Vulnerable URL: https://www.t-vec.com/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Wireshark 1.12.x < 1.12.9 Multiple DoS

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.9. It is, therefore, affected by multiple denial of service vulnerabilities in the following components : - 802.11 dissector - AllJoyn dissector - ANSI A dissector - Ascend file parser - BER dissector - DCOM...

CVE-2014-6444: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to iframe-googlefont-preview.php or the 2 text parameter to iframe-font-preview.php...

Wireshark T.38 Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. Wireshark version 1.12.x prior to 1.12.9, the function initt38infoconv in epan/dissectors/packet-t38.c in the T.38 parser fails to ensure that the conversation exits or not, and by constructing a packet, a remote attacker can cause a denial o...

DEBIAN-CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Code injection

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716

Wireshark 1.12.x before 1.12.9 is vulnerable to CVE-2015-8716. The init_t38_info_conv function in epan/dissectors/packet-t38.c does not ensure a conversation exists, enabling remote attackers to crash the application via a crafted T.38 packet. Remediation per the linked description is to upgrade ...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716: Improper Input Validation

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...