6170 matches found
Apple Safari 10.0.3 - JSC::CachedCall Use-After-Free Exploit
Exploit for macOS platform in category remote exploits function makecompiledfunction function targetx return x5 + x - xx; // Call only once so that function gets compiled with low level interpreter // but none of the optimizing JITs target0; return target; function pwn var haxs = new Array0x100;...
Apple Safari 10.0.3 - JSC::CachedCall Use-After-Free
Apple Safari 10.0.3 - JSC::CachedCall Use-After-Free function makecompiledfunction function targetx return x5 + x - xx; // Call only once so that function gets compiled with low level interpreter // but none of the optimizing JITs target0; return target; function pwn var haxs = new Array0x100; fo...
Heap overflow
LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...
H3C / HPE Intelligent Management Center RMI Java Object Deserialization RCE
The H3C or HPE Intelligent Management Center iMC web server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialization of Java objects to the Apache Commons BeanUtils library via the euplat RMI registry. An unauthenticated, remote attacker can...
phpMyAdmin 4.6.x < 4.6.3 Multiple Vulnerabilities (PMASA-2016-17 - PMASA-2016-28)
According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.6.x prior to 4.6.3. It is, therefore, affected by the following vulnerabilities: - A flaw exists in the setup/frames/index.inc.php script that allows an unauthenticated, remote attacker ...
Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Dmitry Chastuhin ERPScan Description 1. ADVISORY...
Oracle E-Business Suite 12.2.3 - IESFOOTPRINT SQL Injection Vulnerability
Exploit for jsp platform in category web applications Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017...
network6000.com XSS vulnerability
Vulnerable URL: http://www.network6000.com/pics/flash-coach-clicktag.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10061404 VIP...
Threat Outbreak Alert RuleID28783: Email Messages Distributing Malicious Software on April 17, 2017
Medium Alert ID: 53481 First Published: 2017 April 17 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28783 may contain the following files: Name | Si...
Castle Rock Computing SNMPc Cross-Site Scripting Vulnerability
Castle Rock Computing SNMPc is a distributed network management system from Castle Rock Computing that provides proactive, real-time monitoring capabilities for the entire network infrastructure. A cross-site scripting vulnerability exists in versions of Castle Rock Computing SNMPc prior to...
HP Intelligent Management Center SOM Module filePath Information Disclosure
The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Service Operation Management SOM module, specifically within the FileDownload servlet, due to improper validation of user-supplied input to th...
CVE-2016-10310
Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service resource consumption and process crash by sending a crafted packet several times, aka SAP Security Note 2308778...
Sql injection
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...
CVE-2015-6027
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...
CVE-2015-6027
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...
CVE-2017-6464
creationtimestamp| type| source ---|---|--- 2017-04-05 17:26:43+00:00| seen| https://t.me/webamoozir/1522 2026-07-26 07:02:07+00:00| seen| https://t.me/KaitNews/3756 2026-07-27 00:01:47+00:00| seen| https://t.me/KaitNews/3756 2026-08-05 15:00:06+00:00| seen| https://t.me/KaitNews/3756 2026-08-06...
novaconcursos.com.br XSS vulnerability
Vulnerable URL: http://www.novaconcursos.com.br/catalogsearch/result/?q=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Threat Outbreak Alert RuleID28366: Email Messages Distributing Malicious Software on March 17, 2017
Medium Alert ID: 53063 First Published: 2017 March 17 12:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28366 may contain the following files: Name | Si...
Threat Outbreak Alert RuleID28358: Email Messages Distributing Malicious Software on March 17, 2017
Medium Alert ID: 53062 First Published: 2017 March 17 12:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28358 may contain the following files: Name | Si...