CVE-2018-5709

An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. There is a variable "dbentry-nkeydata" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect...

Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018

None None...

ImageMagick Denial of Service Vulnerability (CNVD-2018-00102)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadOnePNGImage function in coders/png.c in ImageMagick version 7.0.7-16 Q16. An attacker can exploit this vulnerabilit...

CVE-2017-17914

In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service ReadOneMNGImage large loop via a crafted mng image file...

CVE-2017-17884

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file...

CVE-2017-17887

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage...

CVE-2017-17884

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability is present in the PNG coder function WriteOnePNGImage (coders/png.c) that can cause a denial of service via a crafted PNG image. The CVE entry provides this concrete detail and does not list an available fix in the supplied documents. Pract...

CVE-2017-17887

CVE-2017-17887 affects ImageMagick 7.0.7-16 Q16. A memory leak in GetImagePixelCache (magick/cache.c) can be triggered by processing a crafted MNG image via ReadOneMNGImage, potentially leading to denial of service. No remediation or patch details are provided in the supplied documents.

gomovies.co XSS vulnerability

Open Bug Bounty ID: OBB-454154 Description| Value ---|--- Affected Website:| gomovies.co Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-17712

creationtimestamp| type| source ---|---|--- 2017-12-16 06:50:35+00:00| published-proof-of-concept| https://t.me/HackerOne/1436...

Call For Customer Presentations at RSA Conference 2018!

Tell your security story to your peers at RSA Conference 2018 San Francisco! Qualys is looking for customers excited to share their security and DevSecOps successes, best practices and case studies leveraging the use of the Qualys Cloud Platform. Take the stage in the Qualys booth to share your...

16-25railcard.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-447964 Description| Value ---|--- Affected Website:| 16-25railcard.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Cr3dOv3r v0.2 - Know The Dangers Of Credential Reuse Attacks

Your best friend in credential reuse attacks. Cr3dOv3r simply you give it an email then it does two simple jobs but useful : Search for public leaks for the email and if it any, it returns with all available details about the leak Using hacked-emails site API. Now you give it this email's old or...

wexford-links.com XSS vulnerability

Open Bug Bounty ID: OBB-420753 Description| Value ---|--- Affected Website:| wexford-links.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2017-16866

dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting XSS in core/MController.php via the DRURI field...

rst.ua XSS vulnerability

Open Bug Bounty ID: OBB-418120 Description| Value ---|--- Affected Website:| rst.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

knifecenter.com XSS vulnerability

Open Bug Bounty ID: OBB-418074 Description| Value ---|--- Affected Website:| knifecenter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID31312: Email Messages Distributing Malicious Software on November 16, 2017

Medium Alert ID: 55957 First Published: 2017 November 16 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31312 may contain the following files: Name |...

triotronik.com XSS vulnerability

Vulnerable URL: https://www.triotronik.com/?sid=%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1053152 VIP website status:| No Coordinated Disclosure Timeline:...

ozbusiness.com.au XSS vulnerability

Open Bug Bounty ID: OBB-417939 Description| Value ---|--- Affected Website:| ozbusiness.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...