Thomsom Cable Modem TWG850-4B ST9C.05.08 Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +...

Debian Security Advisory DSA 3347-1 (pdns - security update)

Pyry Hakulinen and Ashish Shakla at Automattic discovered that pdns, an authoritative DNS server, was incorrectly processing some DNS packets; this would enable a remote attacker to trigger a DoS by sending specially crafted packets causing the server to crash. OpenVAS Vulnerability Test $Id:...

[SECURITY] Fedora 23 Update: pcre-8.37-4.fc23

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

hischierweine.ch XSS vulnerability

Vulnerable URL: http://www.hischierweine.ch/suche.cfm Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9432786 Google Pagerank| 4 VIP website status:| No...

IP.Board 4.X - Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: IP.Board 4.X Stored XSS Date: 27-08-2015 Software Link: https://www.invisionpower.com/ Exploit Author: snop. Contact: http://twitter.com/rabbitzorg Website: http://rabbitz.org Category: webapps 1. Description A registered or...

peakdistrictinformation.com XSS vulnerability

Vulnerable URL: http://www.peakdistrictinformation.com/accommodation/b-and-b/bandb-search.php?place=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=4075=3755=4075=3755 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

Tenable SecurityCenter Multiple Apache Vulnerabilities (TNS-2015-11)

The Tenable SecurityCenter application installed on the remote host contains a bundled version of Apache HTTP Server prior to 2.4.16. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the chunked transfer coding implementation in httpfilters.c. due to a failure to...

elizabethleach.com XSS vulnerability

Vulnerable URL: http://www.elizabethleach.com/Search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2199072 Google Pagerank| 4 VIP website status:| No Check elizabethleach.com...

bluespiral1.com XSS vulnerability

Vulnerable URL: http://www.bluespiral1.com/Search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2621517 Google Pagerank| 4 VIP website status:| No Check bluespiral1.com SSL...

manualsonline.com XSS vulnerability

Vulnerable URL: http://www.manualsonline.com/search.html?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13797 Google Pagerank| 4 VIP website status:| Yes Check manualsonline.co...

[SECURITY] Fedora 23 Update: libpgf-6.14.12-4.fc23

libPGF contains an implementation of the Progressive Graphics File PGF which is a new image file format, that is based on a discrete, fast wavelet transform with progressive coding features. PGF can be used for lossless and lossy compression...

airtellive.com Open Redirect vulnerability

Vulnerable URL: http://airtellive.com/twitter/hash.html?redirectUrl=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 124058 Google Pagerank| 4 VIP...

Fedora 23 : keepass-2.30-2.fc23 (2015-13095)

Update to KeePass 2.30. Add workaround for missing dependency on libgdiplus.so with Mono 4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

exist.ua XSS vulnerability

Vulnerable URL: http://exist.ua/price.aspx?pcode=%27%20type%3Dtext%20autofocus%20onfocus%3Dalert%28%2fxssposed%2f%29%20s%3D%27a Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

CVE-2015-4493

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

Integer overflow

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

Integer overflow

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...