CVE-2019-5925

Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5925

CVE-2019-5925 describes a cross-site scripting vulnerability in Dradis Community Edition (v3.11 and earlier) and Dradis Professional Edition (v3.1.1 and earlier) . The issue allows a remote authenticated attacker to inject arbitrary web script or HTML via unspecified vectors, potentially affectin...

HP Ink Printers RCE Vulnerabilities (Faxploit)

Two security vulnerabilities have been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack or static buffer overflow, which could allow remote code execution RCE. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might...

CVE-2018-5925

CVE-2018-5924 and CVE-2018-5925 affect HP Inkjet/Officejet printers. Threat reports describe two remote code execution vulnerabilities caused by buffer overflows when processing certain materials (e.g., crafted files or fax data). The issues enable attackers to potentially take control of the pri...

HP Ink Printers Multiple Vulnerabilities (HPSBHF03589)

The firmware version running on the remote host is vulnerable to multiple vulnerabilities. An unauthenticated remote attacker could gain system-level unauthorized access to the affected device. Note that Nessus has not tested for these issues but has instead relied only on the self-reported versi...

DEF CON 2018: Critical Bug Opens Millions of HP OfficeJet Printers to Attack

LAS VEGAS – Tens of millions of fax-ready HP OfficeJet inkjet printers are vulnerable to a simple hack that gives an attacker full control over a targeted printer. Once compromised, the all-in-one OfficeJet could act as a springboard for deeper network penetration by an attacker. Here at DEF CON,...

CVE-2018-5925

creationtimestamp| type| source ---|---|--- 2018-08-07 13:24:09+00:00| seen| https://t.me/informationsecuritychannel/19165 2018-08-07 16:01:28+00:00| seen| https://t.me/SecLabNews/2846 2018-08-14 20:00:09+00:00| seen| https://t.me/sysodmins/3177...

otakotaku.com XSS vulnerability

Open Bug Bounty ID: OBB-596891 Description| Value ---|--- Affected Website:| otakotaku.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-5925

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

CVE-2017-5925

CVE-2017-5925 describes an Intel MMU page-table walk side-channel vulnerability where, during virtual-to-physical address translation, the MMU leaves traces in the last-level cache, enabling a JavaScript-based attack to leak data and code pointers and break ASLR. Connected sources note that the A...

Memory corruption

The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-5925...

CVE-2015-5925

CVE-2015-5925 affects Apple CoreGraphics; memory corruption in CoreGraphics can be triggered by visiting a crafted web page. It impacts iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1, with remote code execution or memory corruption as described. Apple’s advisories list this as part...

F5 Networks BIG-IP : MySQL vulnerabilities (SOL8178)

Information about these advisories is available at the following locations : %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL8178. The text description of this plugin is C F5 Networks...

CVE-2014-5925

The CVE-2014-5925 entry concerns the Android app “10000 Kindle Books Downloads” (com.ww10000KindleBooksLatestnBestSellers) version 0.312, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can allow a man-in-the-middle to spoof servers and obtain sensit...

Oracle Linux 5 : Important: / mysql (ELSA-2007-1155)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-1155 advisory. 4.1.20-3.RHEL4.1.el46.1 - Back-port upstream fixes for CVE-2007-5925, CVE-2007-5969. Resolves: 422181 Tenable has extracted the preceding description...

Oracle Linux 4 : elinks (ELSA-2006-0742)

From Red Hat Security Advisory 2006:0742 : An updated elinks package that corrects a security vulnerability is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elinks is a text mode Web browser used...

Slackware: Security Advisory (SSA:2007-348-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-851-1 (elinks)

The remote host is missing an update to elinks announced via advisory USN-851-1. OpenVAS Vulnerability Test $Id: ubuntu8511.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8511.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-851-1 elinks Authors: Thomas Rein...

Ubuntu 6.06 LTS : elinks vulnerabilities (USN-851-1)

Teemu Salmela discovered that Elinks did not properly validate input when processing smb:// URLs. If a user were tricked into viewing a malicious website and had smbclient installed, a remote attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2006-5925...

USN-851-1: Elinks vulnerabilities

Teemu Salmela discovered that Elinks did not properly validate input when processing smb:// URLs. If a user were tricked into viewing a malicious website and had smbclient installed, a remote attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2006-5925...