HDF5 Group libhdf5 H5T_COMPOUND Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0179 HDF5 Group libhdf5 H5TCOMPOUND Code Execution Vulnerability November 17, 2016 CVE Number CVE-2016-4333 Description HDF5 is a file format that is maintained by a non-profit organization, The HDF Group. HDF5 is designed to be used for storage and...

DEBIAN-CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

Design/Logic Flaw

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

CVE-2016-7912

The CVE-2016-7912 entry describes a use-after-free in the Linux kernel involving ffs_user_copy_worker in drivers/usb/gadget/function/f_fs.c, prior to version 4.5.3. This flaw lets local users escalate privileges by accessing an I/O data structure after a callback, as documented in multiple source...

CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

ipregistry.dmrights.com XSS vulnerability

Vulnerable URL: http://ipregistry.dmrights.com/counter/index.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...

te-kyu.com XSS vulnerability

Vulnerable URL: http://te-kyu.com/inc/twitteroauth/twitter.php?callback=prompt/OPENBUGBOUNTY/...

knarvikmila.no XSS vulnerability

Vulnerable URL: http://knarvikmila.no/Sponsor/get?placeHolder=5=200000195=1317=0=0=prompt/OPENBUGBOUNTY/...

help.objectiflune.com XSS vulnerability

Vulnerable URL: http://help.objectiflune.com/common/doctools/globals.php?jsoncallback=prompt/OPENBUGBOUNTY/...

profil.lindependant.fr XSS vulnerability

Vulnerable URL: http://profil.lindependant.fr/remote/bloc-newsletter.php?jsonCallback=prompt/OPENBUGBOUNTY/...

oxfam.org.au XSS vulnerability

Vulnerable URL: https://www.oxfam.org.au/my/profile/gettheuser?jsoncallback=prompt/OPENBUGBOUNTY/...

guatemalanadventure.com XSS vulnerability

Vulnerable URL: https://guatemalanadventure.com/SistemaGAV1/post.php?jsoncallback=prompt/OPENBUGBOUNTY/...

slarti.myfreeforum.org XSS vulnerability

Vulnerable URL: http://slarti.myfreeforum.org/screenshots/jscreen.php?jsoncallback=prompt/OPENBUGBOUNTY/...

turl.ca XSS vulnerability

Vulnerable URL: http://turl.ca/json.php?jsoncallback=prompt/OPENBUGBOUNTY/...

jamtransfer.com XSS vulnerability

Vulnerable URL: http://www.jamtransfer.com/widget/data.php?callback=prompt/OPENBUGBOUNTY/...

kran-ts.ru XSS vulnerability

Vulnerable URL: http://kran-ts.ru/my/s3/captcha/get.php?callback=prompt/OPENBUGBOUNTY/...

php: Double free in _php_mb_regex_ereg_replace_exec

A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...

NVIDIA Driver - NvStreamKms Stack Buffer Overflow in PsSetCreateProcessNotifyRoutineEx Callback Priv

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=918 The NvStreamKms.sys driver calls PsSetCreateProcessNotifyRoutineEx to set up a process creation notification routine. In this particular routine, if cur-imagenamescount 0 ...

tylkodlazabawy.pl XSS vulnerability

Vulnerable URL: http://tylkodlazabawy.pl/login.php?callback=prompt/OPENBUGBOUNTY/...

PT-2016-7330

Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.40 Description The issue allows local users to potentially hide rejected attempts to execute RFC function callbacks by improperly logging certain events as non-critical in the SAP Security Audit Log. This could be...