CVE-2018-16765

CVE-2018-16765 affects WAVM (WebAssembly Virtual Machine); a crafted file may trigger a heap-buffer-overflow in FunctionValidationContext::else_, leading to a denial of service (application crash) and possibly unspecified impact. Affected are WAVM versions up to 2018-07-26. Documented in multiple...

CVE-2018-16766

WAVM (WebAssembly Virtual Machine) is affected by CVE-2018-16766. A crafted file can trigger Errors::unreachable(), potentially causing a denial of service (application crash) or other unspecified impact. The CVSS data (3.0) indicates a network-based, low-attack-vector issue with no privileges re...

CVE-2018-16764

CVE-2018-16764 affects WAVM (WebAssembly Virtual Machine). A crafted input file can trigger a heap-based buffer over-read in IR::FunctionValidationContext::catch_all, potentially causing a denial of service via application crash and possibly other impact. Affected versions are WAVM up to 2018-07-...

CVE-2018-16764

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an IR::FunctionValidationContext::catchall heap-based buffer over-read...

WAVM Buffer Overflow Vulnerability

WAVM is the WebAssembly Virtual Machine. A buffer overflow vulnerability exists in the 'FunctionValidationContext::popAndValidateOperand' function in WAVM 2018-07-26 and earlier versions, which can be exploited by an attacker by sending a specially crafted file to WAVM This can be exploited to...

Trend Micro Enterprise Mobile Security 2.0.0.1700 - Servidor Denial of Service (PoC)

Trend Micro Enterprise Mobile Security 2.0.0.1700 - Servidor Denial of Service PoC Exploit Title: Trend Micro Enterprise Mobile Security 2.0.0.1700 - 'Servidor' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-26 Vendor Homepage:...

ThreatList: Almost All Security Pros Believe Election Systems Are at Risk

As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...

au.euspert.com XSS vulnerability

Open Bug Bounty ID: OBB-654804 Description| Value ---|--- Affected Website:| au.euspert.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NetScanTools Basic Edition 2.5 - Hostname Denial of Service (PoC)

NetScanTools Basic Edition 2.5 - Hostname Denial of Service PoC Exploit Title: NetScanTools Basic Edition 2.5 - 'Hostname' Denial of Service PoC Discovery by: Luis Martínez Discovery Date: 2018-07-26 Vendor Homepage: https://www.netscantools.com/ Software Link :...

NetScanTools Basic Edition 2.5 - 'Hostname' Denial of Service (PoC)

Exploit Title: NetScanTools Basic Edition 2.5 - 'Hostname' Denial of Service PoC Discovery by: Luis Martínez Discovery Date: 2018-07-26 Vendor Homepage: https://www.netscantools.com/ Software Link : http://download.netscantools.com/nstb250.zip Tested Version: 2.5 Vulnerability Type: Denial of...

boattrader.com XSS vulnerability

Open Bug Bounty ID: OBB-650972 Description| Value ---|--- Affected Website:| boattrader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenSSL Security Advisory [26 Jan 2017]

The OpenSSL project released an advisory on Jan 26th, 2017, describing 3 Moderate, 1 Low severity vulnerabilities, as listed below:Â...

helpdesk.agel.cz XSS vulnerability

Open Bug Bounty ID: OBB-638415 Description| Value ---|--- Affected Website:| helpdesk.agel.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-12902

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

miramedia.nl XSS vulnerability

Open Bug Bounty ID: OBB-637164 Description| Value ---|--- Affected Website:| miramedia.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mohonk.com XSS vulnerability

Open Bug Bounty ID: OBB-637157 Description| Value ---|--- Affected Website:| mohonk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID33053: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58299 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33053 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32978: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58296 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32978 may contain the following files: Name | Siz...

post.gov.bn XSS vulnerability

Open Bug Bounty ID: OBB-636829 Description| Value ---|--- Affected Website:| post.gov.bn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

autospares.eu XSS vulnerability

Open Bug Bounty ID: OBB-636810 Description| Value ---|--- Affected Website:| autospares.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...