372 matches found
PT-2017-18262
Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2017-04-25 Description The issue is related to a stack-based buffer overflow in the ipv6 addr from str function, which can be triggered by a malformed IPv6 address. This could allow local attackers, and potentially remot...
LG Cross-Site Scripting Vulnerability
LG Looking Glass is a set of web applications written in Perl for connecting to a router or console. LG suffers from a cross-site scripting vulnerability. It allows an attacker to inject arbitrary web script or HTML via the "addr" parameter...
CVE-2014-3926
Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...
CVE-2014-3926
Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...
CVE-2014-3926
CVE-2014-3926 is an XSS vulnerability in lg.cgi used by Cougar LG 1.9 (LG Looking Glass web apps). The issue arises from accepting the addr parameter without proper sanitization, enabling remote attackers to inject arbitrary web script or HTML. Connected documents (e.g., CNVD-2017-03337) describe...
CVE-2014-3926
Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...
CVE-2014-3926: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...
PT-2017-5889
Name of the Vulnerable Software and Affected Versions: Cougar LG version 1.9 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the addr parameter in the lg.cgi file. Recommendations: For version 1.9, avoid using the addr...
PT-2016-7424
Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and QEMU process crash. This can be achieved by setting the receive ...
DEBIAN-CVE-2016-0821
The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...
UBUNTU-CVE-2016-0821
The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...
Exploit for Improper Input Validation in Linux Linux_Kernel
Exploit for CVE-2017-5123 Step Complile kernel with null...
PT-2016-1597
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3 Description The issue is related to errors in handling the mmap min addr variable in the LIST POISON function of the Linux kernel. This can allow a remote attacker to bypass a protection mechanism by triggeri...
Oracle: Security Advisory (ELSA-2010-0615)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2015-4295
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.18.2 Description The issue concerns the vdso addr function in the Linux kernel, which does not properly choose memory locations for the vDSO area. This makes it easier for local users to bypass the ASLR protecti...
TinyShop二次注入一枚。
简要描述： rt TinyShop v1.0.2 详细说明： 还是 protected\controllers\simple.php文件 public function orderact ................. $address = $model-table"address"-where"id=$addressid"-find; //if!$address$this-redirect"order",false,Req::args; //if!$paymentid$this-redirect"order",false,Req::args; $data'orderno' =...
Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...
Tomcat 3.0/3.1 Snoop Servlet Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1532/info A vulnerability exists in the snoop servlet portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent file with the .snp extension, too much information is...
Android Kernel 2.6 - Local DoS Crash PoC
No description provided by source. Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be...