614 matches found
dlplibs: Global-buffer-overflow in boost::spirit::traits::pow10_helper<double, void>::call
Detailed report: https://oss-fuzz.com/testcase?key=5309012033667072 Project: dlplibs Fuzzer: afldlplibsvsdxfuzzer Fuzz target binary: vsdxfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000009b69c8 Crash State:...
HTTP/2 push is tougher than I thought
"HTTP/2 push will solve that" is something I've heard a lot when it comes to page load performance problems, but I didn't know much about it, so I decided to dig in. HTTP/2 push is more complicated and low-level than I initially thought, but what really caught me off-guard is how inconsistent it ...
dlplibs: Global-buffer-overflow in boost::spirit::char_encoding::ascii::isspace
Detailed report: https://oss-fuzz.com/testcase?key=6346507265507328 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008f4ceb Crash State:...
FreeBSD : moodle -- multiple vulnerabilities (f72d98d1-0b7e-11e7-970f-002590263bf5)
Marina Glancy reports : - MSA-17-0001: System file inclusion when adding own preset file in Boost theme - MSA-17-0002: Incorrect sanitation of attributes in forums - MSA-17-0003: PHPMailer vulnerability in no-reply address - MSA-17-0004: XSS in assignment submission page %NASLMINLEVEL 70300 C...
Local Elevation of Privilege Vulnerability in Multiple Intel Products
Intel Parallel Studio X is a suite of software for improving application performance and big data analytics; Intel Inspector is a suite of tools for dynamically testing applications for memory access errors and thread access errors. Intel Inspector is a set of tools specialized in dynamically...
DD replication causes panic error on the target Data Domain server
Challenge You have configured a Data Domain Storage Unit as a Veeam backup repository using MTree replication. Data Domain replication results in PANIC on the target Data Domain storage. Cause Veeam Backup & Replication leverages the Virtual Synthetic VS feature of the DD Boost library for buildi...
Moodle 3.0.x < 3.0.8 Multiple Vulnerabilities
Binary data 9922.prm...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-17-0001: System file inclusion when adding own preset file in Boost theme MSA-17-0002: Incorrect sanitation of attributes in forums MSA-17-0003: PHPMailer vulnerability in no-reply address MSA-17-0004: XSS in assignment submission page...
Fedora 24 : community-mysql (2016-c7e60a9fd4)
The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-c7e60a9fd4 advisory. Mon Dec 12 2016 Norvald H. Ryeng - 5.7.17-1 - Update to MySQL 5.7.17, for various fixes described at...
Fedora 25 : community-mysql (2016-9b83c6862d)
The remote Fedora 25 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-9b83c6862d advisory. Mon Dec 12 2016 Norvald H. Ryeng - 5.7.17-1 - Update to MySQL 5.7.17, for various fixes described at...
Manalyze - A static analyzer for PE executables
Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior. A static analyzer for PE files Manalyze was written in C++ for Windows and Linux and is released under the terms of the GPLv3 license . It is a robust parser for PE files with a flexible...
Drupal Boost Module Information Disclosure Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Boost is one of the modules that improves the performance of a website by optimizing page caching of static files for anonymous users. An information disclosure vulnerability exists in...
Boost - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-021
This module provides static page caching for Drupal enabling a very significant performance and scalability boost for sites that receive mostly anonymous traffic. The module doesn't prevent form cache from leaking between anonymous users which could result in information disclosure, where one use...
Boost 2 Lite - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Boost 2 Lite published at the 'play' market has multiple vulnerabilities...
360 Security - Antivirus Boost - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application 360 Security - Antivirus Boost published at the 'play' market has multiple vulnerabilities...
AMC Security - Antivirus Boost - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application AMC Security - Antivirus Boost published at the 'play' market has multiple vulnerabilities...
Likes Followers Boost! - Customized SSL, KeyStore usage, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Likes Followers Boost! published at the 'play' market has multiple vulnerabilities...
DU Launcher - Boost Your Phone - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application DU Launcher - Boost Your Phone published at the 'play' market has multiple vulnerabilities...
Speaker Boost - Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Speaker Boost published at the 'play' market has multiple vulnerabilities...
System Scanner: Binmap
Binmap is a system scanner; it takes a system or system image and walks through all files, looking for programs and libraries and collecting various information such as dependencies, symbols etc. It supports ELF and PE formats. binmap builds a database of hashes and informations for systems. One ...