CVE-2015-4493

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...

UBUNTU-CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...

CVE-2015-4479

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data...

FreeBSD Security Advisory FreeBSD-SA-15:19.routed

============================================================================= FreeBSD-SA-15:19.routed Security Advisory The FreeBSD Project Topic: routed8 remote denial of service vulnerability Category: core Module: routed Announced: 2015-08-05 Credits: Hiroki Sato Affects: All supported version...

Linux x86 Egg Hunter Shellcode 19 bytes

Linux x86 Egg Hunter Shellcode 19 bytes. Shellcode exploit for linx86 platform / Title: Linux x86 Egg Hunter Shellcode 19 bytes Date: 4 August 2015 Author: Guillaume Kaddouch Website: http://networkfilter.blogspot.com Twitter: @gkweb76 Tested on: Ubuntu 14.04.2 LTS x86, Kali Linux 1.0.9 x86 This...

torrentfunk.com XSS vulnerability

Vulnerable URL: http://www.torrentfunk.com/all/torrents/asd"ral249".html Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6765 Google Pagerank| 4 VIP websit...

visualsound.com XSS vulnerability

Vulnerable URL: http://www.visualsound.com/prettyPhotoshop/2,/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3538067 Google Pagerank| 4 VIP website...

rcsb.org XSS vulnerability

Vulnerable URL: http://www.rcsb.org/pdb/search/structidSearch.do?structureId=2QFF'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 66284 Google Pagerank| 7 VIP website status:| Yes...

Updated moodle package fixes security vulnerabilities

In Moodle before 2.8.7, phishing is possible when redirecting to external site using referer headers in error messages CVE-2015-3272. In Moodle before 2.8.7, several web services returning user information did not clean text in text custom profile fields, leading to possible XSS CVE-2015-3274. In...

de.all.biz XSS vulnerability

Vulnerable URL: http://www.de.all.biz/search/enterprises/?q=456"onfocus=prompt'XSSposed' autofocus="=2134169=456 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

in.all.biz XSS vulnerability

Vulnerable URL: http://www.in.all.biz/search/enterprises/?q=456"onfocus=prompt'XSSposed' autofocus="=2134169=456 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

suicidememorialwall.com XSS vulnerability

Vulnerable URL: http://www.suicidememorialwall.com/searchresults.php?x=8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1176403 Google Pagerank| 4 VIP website status:| No Check...

morhipo.com XSS vulnerability

Vulnerable URL: http://www.morhipo.com/arama/asd%27-alert%28%27XSSPOSED%27%29-%27stt==0=60=0=0== Details: Description| Value ---|--- Patched:| Yes, at 31.08.2015 Latest check for patch:| 31.08.2015 13:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8442 Googl...

Updated python-django and python-django14 packages fix security vulnerabilities

Eric Peterson and Lin Hua Cheng discovered that a new empty record used to be created in the session storage every time a session was accessed and an unknown session key was provided in the request cookie. This could allow remote attackers to saturate the session store or cause other users' sessi...

Updated mariadb package fixes security vulnerabilities

The mariadb package has been updated to versions 5.5.44 and 10.0.20 in Mageia 4 and Mageia 5, respectively. Both fix an issue where the client is vulnerable to a man-in-the-middle attack when using the --ssl option, where the SSL/TLS protection could be disabled CVE-2015-3152. The Mageia 4 update...

CVE-2015-1840

CVE-2015-1840 describes a CSRF/XSS-style risk in Rails tooling: jquery_ujs.js and rails.js could cause a CSRF token to be transmitted to a different-domain server when a URL attribute contains a leading space. This bypasses the Same Origin Policy under supported Rails setups (Rails 3.x/4.x with j...

flaticon.com XSS vulnerability

Vulnerable URL: http://www.flaticon.com/authors/sergiu-bagrin?xss'-alert/XSSposed/-'1=1 Details: Description| Value ---|--- Patched:| Yes, at 04.07.2016 Latest check for patch:| 04.07.2016 08:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2864 Google Pageran...

Siemens multiple products there is a security problem, the part of the patch has been released-vulnerability warning-the black bar safety net

Siemens recently released software and firmware security update, saying the company multiple products there are security issues, users are advised to update ASAP. ICS-CERT and Siemens announcement that the SIPROTEC 4 and SIPROTEC Compact devices recently have been affected by the vulnerability...