CVE-2018-7768

The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the tpl input parameter...

CVE-2018-7768

CVE-2018-7768 affects Schneider Electric U.motion Builder software prior to v1.3.4. The vulnerability is an SQL injection in the underlying SQLite database query triggered by the tpl input parameter in loadtemplate.php. Exploitation could allow an attacker to execute arbitrary SQL against the dat...

CVE-2017-7768

The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access,...

CVE-2017-7768

CVE-2017-7768: Local privilege issue where an unprivileged user can read 32 bytes from any local file via Mozilla Maintenance Service by convincing it to read a status file from the Windows updater. Affected: Firefox ESR < 52.2 and Firefox

CVE-2017-7768

The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access,...

Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

openSUSE Security Update : Mozilla based packages (openSUSE-2017-712)

This update for Mozilla Firefox, Thunderbird, and NSS fixes the following issues : Mozilla Firefox was updated to 52.2esr boo1043960 MFSA 2017-16 : - CVE-2017-5472 bmo1365602 Use-after-free using destroyed node when regenerating trees - CVE-2017-7749 bmo1355039 Use-after-free during docshell...

CVE-2016-7768

...

Konica Minolta FTP Utility 1.0 SEH Buffer Overflow

Exploit Title: Konica Minolta FTP Utility - CWD Command SEH Based Buffer Overflow Vulnerability Date: 24/5/2016 Exploit Author: Mandar Vendor Homepage: http://www.konicaminolta.hk/hk/en-us/download-driver-dl-utilities.php Software Link:...

CVE-2015-7768

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow via long CWD commands, enabling remote code execution. Root cause: failure to validate input length when parsing CWD, leading to an SEH overflow (as described by multiple sources). The vulnerability affects Konica Minolta FTP Utility...

CVE-2015-7768

creationtimestamp| type| source ---|---|--- 2015-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38254 2016-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39215 2018-05-29 15:50:33+00:00| seen|...

Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow

This module exploits an SEH overflow in Konica Minolta FTP Server 1.00. Konica Minolta FTP fails to check input size when parsing 'CWD' commands, which leads to an SEH overflow. Konica FTP allows anonymous access by default; valid credentials are typically unnecessary to exploit this vulnerabilit...

CVE-2014-7768

The CVE-2014-7768 entry concerns the Analects of Confucius (com.azbc88881.lunyu) Android app version 8.0, where SSL certificate validation is not performed. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information through crafted certificates. The available docum...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7768)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

Unfixed XSS vulnerability at www.tardis.ed.ac.uk

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.tardis.ed.ac.uk, which at the time of submission ranked 7768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...