5772 matches found
JVN#96052093: ETX-R vulnerable to denial-of-service (DoS)
ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Impact A remote unauthenticated attacker may cause the web server on the product to be terminated abnormally. Solution Apply a Workaround The following workarounds may mitigate the...
CVE-2016-4952
Quick EmulatorQemu built with the VMWARE PVSCSI paravirtual SCSI bus emulation support is vulnerable to an OOB r/w access issue. It could occur while processing SCSI commands 'PVSCSICMDSETUPRINGS' or 'PVSCSICMDSETUPMSGRING'. A privileged user inside guest could use this flaw to crash the Qemu...
n-e-r-v-o-u-s.com XSS vulnerability
Vulnerable URL: http://n-e-r-v-o-u-s.com/shop/product.php?code=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Chrome 5 a vulnerability to be fixed, Google rewards finding vulnerabilities personnel 2W $ -bug-warning-the black bar safety net
Recently, the Google company published the announcement, urged the majority use Windows, Mac OS and Linux operating system user as soon as possible to update their terminals on the Chrome version, in order to eliminate the 5 vulnerability to bring security risks. On has aeration out of 5...
CANToolz aka YACHT (Yet Another Car Hacking Tool) - Framework for Black-Box CAN Network Analysis
CANToolz is a framework for analysing CAN networks and devices. This tool based on different modules which can be assembled in pipe together and can be used by security researchers and automotive/OEM security testers for black-box analysis and etc. You can use this software for ECU discovery, MIT...
EMC ViPR SRM - Cross-Site Request Forgery
Exploit for php platform in category web applications !-- EMC M&R Watch4net lacks Cross-Site Request Forgery protection Abstract It was discovered that EMC M&R Watch4net does not protect against Cross-Site Request Forgery CSRF attacks. A successful CSRF attack can compromise end user data and may...
EMC ViPR SRM - Cross-Site Request Forgery
!-- EMC M&R Watch4net lacks Cross-Site Request Forgery protection Abstract It was discovered that EMC M&R Watch4net does not protect against Cross-Site Request Forgery CSRF attacks. A successful CSRF attack can compromise end user data and may allow an attacker to perform an account hijack. If th...
DEBIAN-CVE-2015-8778
Integer overflow in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via the size argument to the hcreater function, which triggers out-of-bounds heap-memory access...
R & GO - Apache license, Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application R & GO published at the 'play' market has multiple vulnerabilities...
Babies"R"Us Deutschland - Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Babies"R"Us Deutschland published at the 'play' market has multiple vulnerabilities...
Toys"R"Us Deutschland - Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Toys"R"Us Deutschland published at the 'play' market has multiple vulnerabilities...
DEFJAY Radio - 100% R&B - External URLs, Native code usage, Runtime command execution vulnerabilities
HackApp vulnerability scanner discovered that application DEFJAY Radio - 100% R&B published at the 'play' market has multiple vulnerabilities...
R-ORG PREMIUM - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application R-ORG PREMIUM published at the 'play' market has multiple vulnerabilities...
R-ORG (Turk-Arabic Keyboard) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application R-ORG Turk-Arabic Keyboard published at the 'play' market has multiple vulnerabilities...
R+F - BSD license, GPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application R+F published at the 'play' market has multiple vulnerabilities...
Fedora 23 : xen-4.5.2-9.fc23 (2016-f4504e9445)
Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 1296080 Qemu: i386: NULL pointer dereference in vapicwrite CVE-2016-1922 1292767 qemu: Stack-based buffer overflow in megasasctrlgetinfo CVE-2015-8613 1293305 qemu-kvm: Infinite loop and out-of-bounds transfer start i...
r-active.ru XSS vulnerability
Vulnerable URL: http://r-active.ru/dear-user/lostpassword.html Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23147534 Google Pagerank| 3 VIP website...
Oracle Linux 7 : qemu-kvm (ELSA-2016-0083)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0083 advisory. - Resolves: bz1298047 CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations rhel-7.2.z Tenable has extracted the preceding...
PT-2016-3991
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to an OOB r/w access problem in QEMU when built with NE2000 device emulation support. It can occur during 'ioport' read/write operations. A privileged user or process could...
