105 matches found
DEBIAN-CVE-2018-1123
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash temporary denial of service...
CVE-2018-1000136
creationtimestamp| type| source ---|---|--- 2018-05-12 16:05:19+00:00| seen| https://t.me/canyoupwnme/3752 2018-05-14 09:50:15+00:00| exploited| https://t.me/SecLabNews/2179 2018-05-14 18:56:03+00:00| published-proof-of-concept| https://t.me/piratepartyru/188...
D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09178)
The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...
CVE-2018-10740
Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code contained in the webkeywords parameter into the cmsconfig.php file...
Google Android Buffer Overflow Vulnerability (CNVD-2018-10124)
Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm IPQ4019 and other central processing unit CPU products are used by Qualcomm on different platforms. A buffer overflow vulnerability exists in the Qualcomm closed-sour...
mtkiscowines.com XSS vulnerability
Open Bug Bounty ID: OBB-607979 Description| Value ---|--- Affected Website:| mtkiscowines.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-1016
creationtimestamp| type| source ---|---|--- 2018-04-17 06:14:43+00:00| seen| https://t.me/antichat/1247 2026-07-26 07:01:52+00:00| seen| https://t.me/KaitNews/7696 2026-07-27 00:01:35+00:00| seen| https://t.me/KaitNews/7696 2026-07-29 03:00:03+00:00| seen| https://t.me/KaitNews/7696 2026-07-30...
phonetech.dk XSS vulnerability
Open Bug Bounty ID: OBB-600768 Description| Value ---|--- Affected Website:| phonetech.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-3641
creationtimestamp| type| source ---|---|--- 2018-04-05 17:13:04+00:00| seen| https://t.me/informationsecuritychannel/15990...
CVE-2018-9015
dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...
CVE-2018-7528
An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...
Microsoft Office Arbitrary Code Execution Vulnerability (CNVD-2018-05885)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office, which stems from the program's failure t...
wcsmith.com XSS vulnerability
Open Bug Bounty ID: OBB-580154 Description| Value ---|--- Affected Website:| wcsmith.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
xpdf denial of service vulnerability (CNVD-2018-06676)
Xpdf is an open source PDF file viewer, this software runs on X Window as well as Motif. xpdf also runs on all classes of Unix operating systems. xpdf 4.00 in the JBIG2Stream.cc in the JBIG2Stream::readGenericBitmap function there is a denial of service vulnerability. An attacker can exploit this...
Mozilla Firefox memory misreference vulnerability (CNVD-2018-07091)
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a memory misreference vulnerability when manipulating elements, events, and selection ranges during editor operations. An attacker could exploit this vulnerability ...
Bitdefender Total Security Insecure Pipeline Privilege Vulnerability
Bitdefender Total Security is a suite of antivirus programs from the Romanian company Bitdefender. A security vulnerability exists in BitDefender Total Security 2018 version. A local attacker can exploit the vulnerability to cause a denial of service or gain privileges by emulating all channels...
Google Android Media framework remote code execution vulnerability (CNVD-2018-06662)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...
Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-03520)
Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and can also be used as a stand-alone JavaScript engine. engine. A remot...
CVE-2018-4878
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the...
Damon database suffers from a power lifting vulnerability (CNVD-2018-03642)
DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products and adopting JAVA-like virtual machine technology. DM7 database has a privilege loophole,...