3045 matches found
CVE-2016-4564
The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified...
CVE-2016-4432
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...
Symantec/Norton anti-virus engine remote Heap/Pool memory corruption vulnerability analysis CVE-2 0 1 6-2 2 0 8-a vulnerability warning-the black bar safety net
! Recently, Symantec and Norton products using the core anti-virus engine was traced to the presence of high-risk vulnerabilities. It is in the parsing by aspack early version of the packaged executable file will occur when the buffer overflow, leading to memory corruption, Windows systems blue...
Fedora 24 : rpm-4.13.0-0.rc1.27.fc24 (2016-af4989be51)
Fix sigsegv in stringFormat rhbz:1316903 Fix reading rpmtd behind its size in formatValue rhbz:1316896 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash
Rough Auditing Tool for Security RATS 2.3 - Array Out of Block Crash Exploit Title: RATS 2.3 Array Out of Block Crash Date: 29th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link:...
Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash
Exploit Title: RATS 2.3 Array Out of Block Crash Date: 29th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version: RATS 2.3 Tested on: Ubuntu 14.04...
DLA-447-1 mysql-5.5 - security update
Bulletin has no description...
Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)
Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=692 Windows: CSRSS BaseSrvCheckVDM Session 0 Process Creation EoP Platform: Windows 8.1, not tested on Windows 10 or 7 Class: Elevation of Privilege Summary: The CSRSS BaseSrv RP...
AIX 7.2 TL 0 : bind (IV81282) (deprecated)
ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...
Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)
Exploit for linux platform in category dos / poc Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version...
securityshuttersdirect.co.uk XSS vulnerability
Vulnerable URL: http://www.securityshuttersdirect.co.uk/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2688726...
apps.esuitemedia.com XSS vulnerability
Vulnerable URL:...
electoralsearch.in XSS vulnerability
Vulnerable URL:...
tourcompany.nl XSS vulnerability
Vulnerable URL: http://tourcompany.nl/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=index=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...
piscataquischamber.com XSS vulnerability
Vulnerable URL: http://www.piscataquischamber.com/directory.asp?q=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 96528...
umarket.gr XSS vulnerability
Vulnerable URL: http://umarket.gr/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 806023 Google Pagerank| 0 VIP website status:| No Check...
exhibitcitynews.com Open Redirect vulnerability
Vulnerable URL: http://www.exhibitcitynews.com/openx/www/delivery/ck.php?oaparams=2bannerid=226zoneid=0cb=3edae55cc5oadest=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:|...
handpickedmedia.co.uk Open Redirect vulnerability
Vulnerable URL: http://handpickedmedia.co.uk/openx/www/delivery/ck.php?oaparams=2bannerid=1522zoneid=53source=blankcb=43a2af503eoadest=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerabili...
vBulletin decodeArguments serialized object vulnerability
Added: 04/15/2016 CVE: CVE-2015-7808 Background vBulletin is PHP software for building community websites. Problem A vulnerability in vBulletin 5 Connect allows remote attackers to execute arbitrary PHP code by placing a specially crafted serialized object in the arguments parameter to the...
vBulletin decodeArguments serialized object vulnerability
Added: 04/15/2016 CVE: CVE-2015-7808 Background vBulletin is PHP software for building community websites. Problem A vulnerability in vBulletin 5 Connect allows remote attackers to execute arbitrary PHP code by placing a specially crafted serialized object in the arguments parameter to the...