CVE-2018-13348

CVE-2018-13348 : In Mercurial, the mpatch_decode function in mpatch.c (pre-4.6.1) mishandles cases where there should be at least 12 bytes remaining in patch data but aren’t, potentially affecting patch processing with integrity impact. Affected: Mercurial versions before 4.6.1. Remediation: upgr...

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

CVE-2018-0001

creationtimestamp| type| source ---|---|--- 2018-05-23 08:17:55+00:00| seen| https://t.me/antichat/1490...

shop.uhp.com.au XSS vulnerability

Open Bug Bounty ID: OBB-615293 Description| Value ---|--- Affected Website:| shop.uhp.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

velayat.tv XSS vulnerability

Open Bug Bounty ID: OBB-608798 Description| Value ---|--- Affected Website:| velayat.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dmweb.groupegoyette.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-608060 Description| Value ---|--- Affected Website:| dmweb.groupegoyette.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

hillingdon.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-604014 Description| Value ---|--- Affected Website:| hillingdon.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bats.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-602997 Description| Value ---|--- Affected Website:| bats.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

resoluteonline.com XSS vulnerability

Open Bug Bounty ID: OBB-569692 Description| Value ---|--- Affected Website:| resoluteonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

indianaeconomicdigest.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-562088 Description| Value ---|--- Affected Website:| indianaeconomicdigest.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Cisco Firepower Threat Defense (FTD) Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote host is affected by a vulnerability in the XML parser that can allow a remote, unauthenticated attacker to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

video-oldenburg.de XSS vulnerability

Open Bug Bounty ID: OBB-551235 Description| Value ---|--- Affected Website:| video-oldenburg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Juniper Junos J-Web Interface PHP URL Handling Use-after-free RCE (JSA10828)

According to its self-reported version number, the remote Junos device is affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106385; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

imijit.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-521820 Description| Value ---|--- Affected Website:| imijit.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO 29147...

Design/Logic Flaw

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

CVE-2018-0001

CVE-2018-0001 affects Junos OS via the J-Web interface: a use-after-free defect in older PHP handling could allow an unauthenticated remote code execution by crafting data sent to specific PHP URLs. Affected Junos releases include 12.1X46 (before 12.1X46-D67), 12.3 (before 12.3R12-S5), 12.3X48 (b...

CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

VMware vSphere Data Protection 5.x / 6.0.x < 6.0.7 / 6.1.x < 6.1.6 Multiple Vulnerabilities (VMSA-2018-0001

The version of VMware vSphere Data Protection installed on the remote host is 5.x or 6.0.x prior to 6.0.7, or it is 6.1.x prior to 6.1.6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105586; scriptversion"1.9"...

alamirgroupinc.com XSS vulnerability

Open Bug Bounty ID: OBB-481204 Description| Value ---|--- Affected Website:| alamirgroupinc.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

etsglobal.org XSS vulnerability

Open Bug Bounty ID: OBB-457916 Description| Value ---|--- Affected Website:| etsglobal.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...