mofos.com XSS vulnerability

Vulnerable URL: http://www.mofos.com/tour/search/?q=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.07.2017 Latest check for patch:| 22.07.2017 21:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Code injection

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5351

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5351

CVE-2017-5351 affects Samsung Note devices running KK (4.4), L (5.0/5.1), and M (6.0). Reported flaw: the system can be crashed by creating an arbitrarily large number of active VR service threads due to a failure to limit these threads. Root cause is described as uncontrolled/unchecked growth of...

About the security content of Safari 10.0.2

About the security content of Safari 10.0.2 This document describes the security content of Safari 10.0.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2015-7650

Technical details for CVE-2015-7650 are not publicly provided in the supplied documents. No affected product/version/root-cause/remediation is specified here; monitor official advisories for updates on this entry.

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

CVE-2014-7650

The CVE-2014-7650 entry concerns the Android 1.0 JJA app (com.felix.jja), which does not verify X.509 certificates from SSL servers. Root cause: lack of certificate validation enabling MITM-style spoofing of servers and potential exposure of sensitive data. Affected component is the app’s SSL/TLS...