CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4776

CVE-2016-4776 concerns the kernel in Apple platforms prior to updates listed below: iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. An attacker who can run a crafted app may obtain sensitive memory-layout information or cause a denial of service via an out-of-bounds read i...

About the security content of tvOS 10

About the security content of tvOS 10 This document describes the security content of tvOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

contagem.mg.gov.br XSS vulnerability

Vulnerable URL: http://www.contagem.mg.gov.br/pinformacao/busca.php?busca.php=3%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

CVE-2015-4776

Technical details about CVE-2015-4776 are not publicly available in the provided documents. Monitor for updates from official advisories and related EUVD entries for any concrete disclosure, affected products, or remediation information.

CVE-2014-4776

IBM License Metric Tool (LM Tool) 9 prior to 9.1.0.2 is affected. The root cause is the absence of an off autocomplete attribute on authentication fields, which can allow local attackers on unattended workstations to obtain access. This is described in the CVE-2014-4776 entry and corroborated by ...

Netgear ProSafe - Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sy...

CVE-2013-4776

CVE-2013-4776 affects Netgear ProSafe switches (GS724Tv3/GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 5.4.1.14; GS510TP 5.0.4.4) and causes a Denial of Service via a crafted HTTP request to /filesystem/. The issue can reboot or crash the device, leading to loss of network connectivity. P...

NETGEAR ProSafe - Denial of Service

NETGEAR ProSafe - Denial of Service !/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import...

Netgear ProSafe - Denial of Service

!/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sys, getopt, urllib2 from subprocess...

CVE-2012-4776

The CVE-2012-4776 issue is the WPAD-related remote code execution in Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The vulnerability arises because WPAD data returned during proxy settings acquisition is not validated, allowing a crafted data input during XBAP or .NET Framework...

MS12-074: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2745030)

The remote Windows host is running a version of Microsoft .NET Framework that is affected by multiple vulnerabilities : - The way .NET Framework validates the permissions of certain objects during reflection is flawed and could be exploited by an attacker to gain complete control of an affected...

CVE-2011-4776

Multiple cross-site scripting XSS vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/update/settings/ and certain other files...

CVE-2011-4776

Multiple cross-site scripting XSS vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/update/settings/ and certain other files...

CVE-2011-4776

CVE-2011-4776 describes multiple XSS vulnerabilities in Parallels Plesk Panel 10.4.4_build20111103.18. The issue allows remote attackers to inject arbitrary JavaScript/HTML via crafted input to PHP scripts, demonstrated via admin/update/settings/ and other files in the Control Panel. The provided...

SuSE 11.1 Security Update : perl-Config-General (SAT Patch Number 4776)

This update adds the perl-Config-General to the SLES update channel, which is a new requirement after the last tgt security release. - 697106: tgt is not installable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuS...

openSUSE Security Update : kdenetwork4 (openSUSE-SU-2010:1076-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2010-1000: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: CWE-22 The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary...

openSUSE Security Update : kdenetwork3 (openSUSE-SU-2010:1085-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2008-4776: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: CWE-119 The included libgadu version allowed remote servers to cause a denial of service crash via a buffer over-read. Non-security issues : -...

openSUSE Security Update : kde4-kdnssd (openSUSE-SU-2010:1077-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2010-1000: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: CWE-22 The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary...