CVE-2017-18663

An issue was discovered on Samsung mobile devices with N7.x software. Because of missing Intent exception handling, systemserver can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 July 2017...

Code injection

An issue was discovered on Samsung mobile devices with N7.x software. Because of missing Intent exception handling, systemserver can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 July 2017...

CVE-2017-18663

CVE-2017-18663 affects Samsung mobile devices running N(7.x). Root cause: missing Intent exception handling causes a NullPointerException in system_server, potentially crashing a system process. Samsung identifiers: SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, SVE-2017-9126 (July 2017). Connected...

CVE-2017-18663

An issue was discovered on Samsung mobile devices with N7.x software. Because of missing Intent exception handling, systemserver can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 July 2017...

CVE-2019-9123

CVE-2019-9123 affects D-Link DIR-825 Rev.B 2.10 devices. The issue is an empty password on the 'user' account, enabling remote login over the network. Impact described in sources includes unauthorized access with network vector and high/critical severity. Remediation in the documents includes cha...

CVE-2015-9123

CVE-2015-9123 affects many Qualcomm/Android components where code to zeroize the AES key could be optimized away by the compiler, potentially causing information disclosure. The issue is described as an information disclosure vulnerability that could occur on Android devices with affected Snapdra...

Crea8Social Social Network Script Pro / Business Cross Site Scripting

Title: Multiple Cross-Site Scripting Vulnerabilities in Crea8Social Social Network Script - Product Description: Crea8Social is the leading social networking software that helps you build your own custom online community. - Vulnerability Type: Multiple Cross-Site Scripting Vulnerabilities Stored...

CVE-2018-9123

In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile...

CVE-2018-9123

CVE-2018-9123ffects Crea8Social 2018.2 with a Stored Cross-Site Scripting vulnerability via the User Profile feature. The root cause is a stored XSS flaw in user-profile handling that can allow injection of malicious script, potentially executing in other users’ browsers when profiles are viewed....

Crea8Social Social Network Script - Multiple Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications - Title: Multiple Cross-Site Scripting Vulnerabilities in Crea8Social Social Network Script - Product Description: Crea8Social is the leading social networking software that helps you build your own custom online community. - Vulnerability Typ...

CVE-2017-15662

In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9123...

Denial of service

In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9123...

VX Search Enterprise 10.1.12 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: VX Search Enterprise Server v10.1.12 - Denial of Service Date: 2017-10-20 Exploit Author: Ahmad Mahfouz Software Link: http://www.vxsearch.com/setups/vxsearchsrvsetupv10.1.12.exe Version: v10.1.12 Category; Windows Remote DOS CVE:...

VX Search Enterprise 10.1.12 - Denial of Service

VX Search Enterprise 10.1.12 - Denial of Service Exploit Title: VX Search Enterprise Server v10.1.12 - Denial of Service Date: 2017-10-20 Exploit Author: Ahmad Mahfouz Software Link: http://www.vxsearch.com/setups/vxsearchsrvsetupv10.1.12.exe Version: v10.1.12 Category; Windows Remote DOS CVE:...

Debian DLA-1042-1 : libquicktime security update

CVE-2017-9122 The quicktimereadmoov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted mp4 file. CVE-2017-9123 The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers t...

Updated libquicktime packages fix security vulnerabilities

A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed CVE-2017-9122. An invalid memory read in lqtframeduration via a crafted mp4 file was fixed CVE-2017-9123. A NULL pointer dereference in quicktimematch32 via a crafted mp4 file was fixed CVE-2017-9124. A DoS in...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:1769-1)

This update for libquicktime fixes the following issues : - CVE-2017-9122: A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed. bsc1044077 - CVE-2017-9123: An invalid memory read in lqtframeduration via a crafted mp4 file was fixed. bsc1044009 - CVE-2017-9124: A NULL...

CVE-2017-9123

The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...

UBUNTU-CVE-2017-9123

The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...

CVE-2017-9123

The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...