CVE-2023-6858

CVE-2023-6858 : Firefox was vulnerable to a heap buffer overflow in the nsTextFragment code path due to insufficient OOM handling. Affected products include Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox

KLA62517 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Security...

KLA62518 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, inject malicious code, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of...

Mozilla Firefox < 121.0

The version of Firefox installed on the remote Windows host is prior to 121.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-56 advisory. - Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that...

KLA62519 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Security vulnerability in Symlinks...

SUSE CVE-2013-6406

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6858. Reason: This candidate is a reservation duplicate of CVE-2013-6858. Notes: All CVE users should reference CVE-2013-6858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2020-6858

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header...

CVE-2020-6858

CVE-2020-6858 affects Hotels Styx up to 1.0.0.beta8. The issue is HTTP Response Splitting (CRLF injection) caused by disabling Netty’s HTTP header validation in Styx code paths: HttpHeaders.Builder configured with new DefaultHttpHeaders(false) and StyxToNettyResponseTranslator creating DefaultHtt...

CVE-2020-6858

creationtimestamp| type| source ---|---|--- 2020-02-10 11:28:30+00:00| published-proof-of-concept| https://github.com/ExpediaGroup/styx/security/advisories/GHSA-6v7p-v754-j89v...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

CVE-2019-6858

CVE-2019-6858 affects MSX Configurator (software) prior to version V1.0.8.1. The vulnerability is CWE-427: Uncontrolled Search Path Element, which could lead to privilege escalation by injecting a malicious DLL. The public description confirms a local impact with partial to high confidentiality/i...

slinger.k12.wi.us Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6858 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting slinger.k12.wi.us website and its users. Following...

parts-promotion-toolbox.se Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6858 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting parts-promotion-toolbox.se website and its users...

luckydog.tw Open Redirect vulnerability

Security Researcher Gh05tPT Helped patch 6858 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting luckydog.tw website and its users. Following coordinated...

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

CVE-2018-6858

CVE-2018-6858 affects the PHP Scripts Mall Facebook Clone Script (notably version 1.0.5). The connected sources describe a cross-site scripting (XSS) vulnerability in the Facebook Clone Script, enabling injection of arbitrary web script or HTML via user comments, i.e., a stored XSS scenario demon...

Facebook Clone Script 1.0.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul...

Facebook Clone Script 1.0.5 - Cross-Site Scripting

Facebook Clone Script 1.0.5 - Cross-Site Scripting. CVE-2018-6858. Webapps exploit for PHP platform Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/...