Mozilla: Use-after-free in SetBody (MFSA 2016-24)

Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574...

Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2017-3165

Name of the Vulnerable Software and Affected Versions Wget versions prior to 1.19.2 Description The issue arises from the http.c:skip short body function, which is called under certain circumstances, such as processing redirects. In Wget, when a response is sent chunked, the chunk parser uses...

Inside the Conficker-Infected Police Body Cameras

Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...

PT-2015-7155

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions prior to 8.5.7-043 Cisco Email Security Appliance ESA versions 9.x prior to 9.1.1-023 Cisco Email Security Appliance ESA versions 9.5.x and 9.6.x prior to 9.6.0-046 Description The issue arises from...

Cisco IOS/IOS XE SSHv2 Body Authentication Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE Software have a security vulnerability in the implementation of the SSHv2 protocol. A remote attacker could exploit this vulnerability to bypass the user...

the-body-shop.it XSS vulnerability

Vulnerable URL: http://www.the-body-shop.it/it/catalogsearch/result/?q="...

calculator.net XSS vulnerability

Vulnerable URL: http://www.calculator.net/body-fat-calculator.html?ctype=standard=m===1==='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7313 Google Pagerank| 5 VIP website...

Shopify: Body injection in mailto link while commenting shop blog

While commenting shop blog an attacker can inject a body attribute in email so it will be interpreted by shop administrator email-client. Attacker can make the request below to send the malicious comment: http POST /blogs/news/18286141-first-post/comments HTTP/1.1 Host: test-4579.myshopify.com...

Dream Multimedia DreamBox DM500-S Cross-Site Scripting Vulnerability

Dream Multimedia DreamBox DM500-S is a Linux-based digital TV set-top box receiver from Dream Multimedia, Germany. A cross-site scripting vulnerability exists in the Dream Multimedia DreamBox DM500-S. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML v...

PT-2015-6676

Name of the Vulnerable Software and Affected Versions DreamBox DM500-S affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the mode parameter to the "/body" API endpoint. Recommendations For DreamBox...

PT-2015-6657

Name of the Vulnerable Software and Affected Versions Mailbird versions 2.0.16.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an e-mail message body. Recommendations For Mailbird versions 2.0.16.0 and...

CVE-2015-4657: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted URL...

UBUNTU-CVE-2014-0230

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption via a series of aborted uploa...

tomcat6: denial of service

When a response for a request with a request body is returned to the user agent before the request body is fully read, by default Tomcat swallows the remaining request body so that the next request on the connection may be processed. There was no limit to the size of request body that Tomcat woul...

Fixed in Apache Tomcat 6.0.44

Low: Denial of Service CVE-2014-0230 When a response for a request with a request body is returned to the user agent before the request body is fully read, by default Tomcat swallows the remaining request body so that the next request on the connection may be processed. There was no limit to the...

tomcat -- multiple vulnerabilities

Apache Software Foundation reports: Low: Denial of Service CVE-2014-0230 When a response for a request with a request body is returned to the user agent before the request body is fully read, by default Tomcat swallows the remaining request body so that the next request on the connection may be...

[SECURITY] CVE-2014-0230: Apache Tomcat DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat 7.0.0 to 7.0.54 - - Apache Tomcat 6.0.0 to 6.0.43 Description: When a response for a reque...

Tomcat full system packet DoS denial of service vulnerability CVE-2 0 1 4-0 2 3 0-vulnerability warning-the black bar safety net

Tomcat burst number for the CVE-2 0 1 4-0 2 3 0 DoS denial of service vulnerability. The vulnerability risk level is LOW, the impact of the version include: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat 7.0.0 to 7.0.54 - - Apache Tomcat 6.0.0 to 6.0.43 The problem occurs in with the...

Apache Tomcat Denial of Service Vulnerability (CNVD-2015-02909)

Apache Tomcat is a popular open source JSP application server program. A denial of service vulnerability exists in Apache Tomcat.Tomcat fails to limit the size of the trusted requestor body and Tomcat does not close the connection and the processing threads remain connected, which can lead to a...