PHP Scripts Mall Alibaba Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Alibaba Clone Script is an e-commerce system from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Alibaba Clone Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PHP Scripts Mall Bitcoin MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Bitcoin MLM Software is a PHP-based bitcoin management software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Bitcoin MLM Software version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting. CVE-2018-6867. Webapps exploit for PHP platform Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category...

CVE-2018-6861

Cross Site Scripting XSS exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter...

Artifex MuJS 1.0.2 - Integer Overflow Exploit

Exploit for multiple platform in category dos / poc Exploit Title: DoS caused by the interactive call between two functions Date: 2018-01-16 Exploit Author: Andrea Sindoni - @invictus1306 Vendor: Artifex https://www.artifex.com/ Software Link: https://github.com/ccxvii/mujs Version: Mujs -...

Artifex MuJS 1.0.2 - Denial of Service

Artifex MuJS 1.0.2 - Denial of Service Hello, I want to submit the following bug: The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Exploit Title: Integer signedness error leading to Out-of-bounds read that causes cra...

Artifex MuJS 'js_strtod' function integer overflow vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. An integer overflow vulnerability exists in the 'jsstrtod' function of the jsdtoa.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from...

Artifex MuJS Denial of Service Vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. A security vulnerability exists in the jsparse.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from the program failing to properly...

An Analysis of the OpenSSL SSL Handshake Error State Security Bypass (CVE-2017-3737)

OpenSSL is a widely used library for SSL and TLS protocol implementation that secures data using encryption and decryption based on cryptographic functions. However, a Security Bypass vulnerability – recently addressed in a patch by the OpenSSL Project –can be exploited to make vulnerable SSL...

WordPress ResAds Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of blogging platform , the platform supports in PHP and MySQL server set up personal blog site.ResAds plugin is used in one of the display formatting plugin for adaptation to a variety of endpoints. A cross-site...

OpenSSL Security Restriction Bypass Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security restriction bypass vulnerability exists in OpenSSL version 1.0.2, which can be exploited by an attacker to bypass security mechanisms and perform unauthorized operations...

CVE-2017-3737

OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the...

OpenSSL Security Bypass Vulnerability (Dec 2017) - Windows

OpenSSL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

CVE-2017-3737

OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the...

CVE-2017-3738

There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...

CVE-2017-3737

OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the...

SUSE SLES12 Security Update : openssl (SUSE-SU-2017:2981-1)

This update for openssl fixes the following issues: Security issues fixed : - CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read bsc1056058 - adjust DEFAULTSUSE to meet 1.0.2 and current state bsc1027908 - out of bounds read+crash in DESfcrypt bsc1065363 - DEFAULTSUSE cipher list ...

Jnes 1.0.2 - Stack Buffer Overflow

!/usr/bin/env python coding: utf-8 Exploit Title: Jnes Version 1.0.2 Stack Buffer Overflow Date: 3-11-2017 Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: http://www.jabosoft.com/home Software Link: http://www.jabosoft.com/categories/3 Version: v1.0.2.15 Tested o...