GLSA-201706-19 : GNU C Library: Multiple vulnerabilities (Stack Clash)

The remote host is affected by the vulnerability described in GLSA-201706-19 GNU C Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers and Qualys security advisory referenced below for details. Impact : An attacke...

Threat Outbreak Alert RuleID29513: Email Messages Distributing Malicious Software on June 19, 2017

Medium Alert ID: 54230 First Published: 2017 June 19 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29513 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29503: Email Messages Distributing Malicious Software on June 19, 2017

Medium Alert ID: 54225 First Published: 2017 June 19 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29503 may contain the following files: Name | Siz...

CVE-2017-8514

creationtimestamp| type| source ---|---|--- 2017-06-19 11:16:03+00:00| seen| https://t.me/webamoozir/2009 2023-12-18 02:14:33+00:00| seen| https://t.me/arpsyndicate/1890 2026-07-26 07:02:03+00:00| seen| https://t.me/KaitNews/4536 2026-07-27 00:01:43+00:00| seen| https://t.me/KaitNews/4536...

m.see.xxx XSS vulnerability

Open Bug Bounty ID: OBB-246634 Description| Value ---|--- Affected Website:| m.see.xxx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

horzrt.hu XSS vulnerability

Open Bug Bounty ID: OBB-245429 Description| Value ---|--- Affected Website:| horzrt.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AutoTrace Denial of Service Vulnerability (CNVD-2017-08536)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the input-tga.c:192:19 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2017-9199

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19...

Threat Outbreak Alert RuleID29196: Email Messages Distributing Malicious Software on May 19, 2017

Medium Alert ID: 53900 First Published: 2017 May 20 03:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29196 may contain the following files: Name | Size...

Friday Squid Blogging: Giant Squid Caught Off the Coast of Ireland

It's rare: Fishermen caught a 19-foot-long giant squid off the coast of Ireland on Monday, only the fifth to be seen there since 1673. Also the first in 22 years. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting...

yourtango.com XSS vulnerability

Vulnerable URL: http://www.yourtango.com/search/'-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11457 VIP website status:| Yes Check yourtango.com SSL...

looki.com.tr XSS vulnerability

Vulnerable URL: http://www.looki.com.tr/login.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 781186 VIP website status:| No Check looki.com.tr SSL connection:| Grade: B...

CVE-2017-5613

creationtimestamp| type| source ---|---|--- 2017-04-19 21:35:10+00:00| seen| https://t.me/canyoupwnme/1253...

Squirrelmail 1.4.22 Remote Code Execution

Advisory ID: SGMA17-001 Title: Squirrelmail Remote Code Execution Product: Squirrelmail Version: 1.4.22 and probably prior Vendor: squirrelmail.org Type: Command Injection Risk level: 4 / 5 Credit: [email protected] CVE: CVE-2017-7692 Vendor notification: 2017-04-04 Vendor fix:...

tl.statcounter.com XSS vulnerability

Open Bug Bounty ID: OBB-224903 Description| Value ---|--- Affected Website:| tl.statcounter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Linux/x86 - execve(/bin/sh") Shellcode (19 bytes)

Linux/x86 - execve/bin/sh" Shellcode 19 bytes. Shellcode exploit for Linx86 platform ;================================================================================ ; The MIT License ; ; Copyright c ; ; Permission is hereby granted, free of charge, to any person obtaining a copy ; of this...

Linux/x86 - execve(/bin/sh) Shellcode (19 bytes)

;================================================================================ ; The MIT License ; ; Copyright c ; ; Permission is hereby granted, free of charge, to any person obtaining a copy ; of this software and associated documentation files the "Software", to deal ; in the Software...

Security fix for the ALT Linux 8 package tar version 1.29.0.19.d061-alt1

1.29.0.19.d061-alt1 built March 28, 2017 Dmitry V. Levin in task 180955 --- March 20, 2017 Dmitry V. Levin - tar: release128-39-gd02c81d - release129-19-gd06126f fixes: CVE-2016-6321. - tar: added --lz4 and --zstd options. - gnulib: v0.1-585-g2fda85e - v0.1-1209-g24b3216...

Cross site scripting

A Cross-Site Scripting XSS was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data type passed to the 'Gazelle-master/sections/better/transcode.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-7249

Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data action, userid passed to the 'Gazelle-master/sections/tools/data/ocelotinfo.php' URL. An attacker could execute arbitrary HTML and script...