Fedora Update for libpng FEDORA-2015-4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lecake.com XSS vulnerability

Vulnerable URL: http://www.lecake.com/shop/wechat/fm.php?couponcode=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59468 Google...

futureproducers.com Open Redirect vulnerability

Vulnerable URL: http://www.futureproducers.com/forums/redirect-to/?redirect=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:55 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

verticalscope.com XSS vulnerability

Vulnerable URL: http://www.verticalscope.com/search.php?q=search=partner-pub-7865546952023728%3A6qrqjyvi21h=FORID%3A11=ISO-8859-1=%22%3E%3CSvg%2Fonload%3Dprompt%28/xssposed/%29%3E&sa.x;=0&sa.y;=0=www.verticalscope.com%2F= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

sverlenie.lg.ua Open Redirect vulnerability

Vulnerable URL: http://sverlenie.lg.ua/go/url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

financedublin.com Open Redirect vulnerability

Vulnerable URL: http://www.financedublin.com/linkout.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3619640 Google Pagerank| 4 VIP websi...

pharmakon.dk Open Redirect vulnerability

Vulnerable URL: http://www.pharmakon.dk/nyhedsbrev/t.aspx?S=8=2782=63=2816=15890=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:54 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

hitec.bash.ru Open Redirect vulnerability

Vulnerable URL: http://www.hitec.bash.ru/click.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 28.03.2016 Latest check for patch:| 28.03.2016 05:29 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2015-8509

Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code...

PlayStation 4 Hacked to Run Linux

Hackers enjoy much playing with PlayStation and Xbox, rather than playing on them. And this time, they have done some crazy things with Sony's PlayStation gaming console. It appears that a console-hacking that goes by the name of Fail0verflow have managed to hack PlayStation 4 PS4 to run a Linux...

vasi.net Open Redirect vulnerability

Vulnerable URL: http://vasi.net/go.php?http://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 30814 Google Pagerank| 4 VIP website status:| Yes Check vasi.ne...

CVE-2015-5330

ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...

Design/Logic Flaw

The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service memory consumption and daemon crash via crafted packets...

CVE-2015-3223

The ldbwildcardcompare function in ldbmatch.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service infinite loop via crafted packets...

Code injection

The ldbwildcardcompare function in ldbmatch.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service infinite loop via crafted packets...

Information disclosure

ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...

Design/Logic Flaw

The samldbcheckuseraccountcontrolacl function in dsdb/samdb/ldbmodules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass...

CVE-2015-5330

CVE-2015-5330 affects the ldb component used by the Samba AD LDAP server. The issue arises in ldb before 1.1.24, within Samba 4.x deployments (before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3), where string lengths are mishandled. This enables a remote attacker to read sensitive data fro...

CVE-2015-7540

Samba CVE-2015-7540 affects the LDAP server in the AD DC of Samba 4.x prior to 4.1.22, where return values aren’t checked during ASN.1 memory allocation. This allows remote attackers to cause a denial of service through crafted packets that exhaust memory and crash the daemon. Remediation is to u...

CVE-2015-7540

The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service memory consumption and daemon crash via crafted packets...