Pornhub: SSRF and local file disclosure by video upload on http://www.youporn.com/

The researcher was successful in exploiting a vulnerability in 3rd encoding party library resulting in the execution of SSRF attacks and Local File Disclosure...

CVE-2018-5425

...

Remote code execution

A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerabl...

Cross-Site Scripting in 3rd party library Flowplayer

More info at https://typo3.org/security/advisory/typo3-core-sa-2015-007...

dtSearch DUNZIP32.dll Buffer Overflow Vulnerability

Networksecurity.fi Security Advisory 21-12-2005 Title: dtSearch DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: dtSearch versions prior than 7.20 Build 7136 Author: Juha-Matti Laurio info at networksecurity.fi, juha-matti.laurio at netti.fi Date: 21th December,...