Code injection

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056: Covert Timing Channel

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

PT-2019-1350

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.10.8 Go versions 1.11.x prior to 1.11.5 Description The issue exists due to insufficient input validation in the crypto module of the Go programming language. This can be exploited by a remote attacker to cause a denial ...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

CVE-2018-16450: Improper Neutralization of Input During Web Page Generation

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

PT-2018-13577

Name of the Vulnerable Software and Affected Versions CraftedWeb through 2013-09-24 Description The issue is related to reflected XSS, which can be triggered via the p parameter. This allows for potential malicious script injection. Recommendations For versions through 2013-09-24, avoid using the...

Huawei P10 Information Disclosure Vulnerability

Huawei P10 is a smartphone product of the Chinese company Huawei Huawei. An information leakage security vulnerability exists in the Huawei P10 phone due to a lack of permission checking. An attacker induced users to install a malicious application, which could read certain hardware serial number...

PT-2018-13235

Name of the Vulnerable Software and Affected Versions fledrCMS versions prior to 2014-02-03 Description An issue was discovered that allows a CSRF vulnerability to change the administrator's password. This can be done via the "index.php?p=done&savedata=1" endpoint. Recommendations For versions...

CVE-2018-15846: Cross-Site Request Forgery (CSRF)

An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1...

p.4share.vn XSS vulnerability

Open Bug Bounty ID: OBB-664152 Description| Value ---|--- Affected Website:| p.4share.vn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-2898

Name of the Vulnerable Software and Affected Versions libtasn1 versions 4.12 through 4.13 Description The issue is related to a denial of service DoS in the asn1 expand object idp tree function, which can cause CPU usage to reach 100% when parsing a crafted file with the asn1Parser. This can lead...

p-e-g.org XSS vulnerability

Open Bug Bounty ID: OBB-662012 Description| Value ---|--- Affected Website:| p-e-g.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-m.com.gr XSS vulnerability

Open Bug Bounty ID: OBB-661366 Description| Value ---|--- Affected Website:| p-m.com.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fresh Approach to WiFi Cracking Uses Packet-Sniffing

Legacy WiFi just became a little less safe, according to Jens Steube, the developer of the password-cracking tool known as Hashcat. He has found a faster, easier way to crack some WPA/WPA2-protected WiFi networks. Hackers have compromised the WPA/WPA2 encryption protocols in the past, but it’s an...

CVE-2018-14872

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset...