62.67.194.183 XSS vulnerability

Vulnerable URL: http://62.67.194.183/clean-mx/viruses.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

clean-market.com XSS vulnerability

Vulnerable URL: http://www.clean-market.com/srub154-votre-recherche.html Details: Description| Value ---|--- Patched:| Yes, at 26.11.2015 Latest check for patch:| 26.11.2015 16:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1392351 Google Pagerank| 0 VIP...

MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

Shopify: Arbitrary write on s3://shopify-delivery-app-storage/files

Short ==== The policy used to upload files via the Delivery app is too generic which results in an arbitrary write and replace of files in the files/ directory. Disclaimer: While I was unable to create a second store to fully test this I can't create new development stores right now, support is...

Researchers to Develop Long-Lasting Solid-State Batteries

Whenever you go to Buy any Electronic Gadget — Phone, Tablet, Laptop, Watch — the most important specification isn’t its processor speed or its camera quality. It’s how long the device’s battery backup is. Imagine easy access to such batteries that provide more battery power after charging it onc...

PT-2016-1288

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier Moodle versions 2.7.x before 2.7.9 Moodle versions 2.8.x before 2.8.7 Moodle versions 2.9.x before 2.9.1 Description The issue is related to an open redirect vulnerability in the clean param function. This...

Clean Login < 1.5.1 - Reflected XSS

The Clean Login WordPress plugin was affected by a Reflected XSS security vulnerability...

[SECURITY] Fedora 22 Update: python-django-1.8.3-1.fc22

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2015-3205

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."...

CVE-2015-3205

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."...

CVE-2015-3205

Libmimedir’s VCF parser is vulnerable to memory corruption when parsing a VCF file with two trailing NULL bytes, triggering risky free() calls during lexer memory cleanup. A PoC/exploit code demonstrates potential arbitrary code execution via crafted VCF inputs; exploitation status in the wild is...

PT-2015-6096

Name of the Vulnerable Software and Affected Versions libmimedir affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file. This is related to "free" function calls in the lexer's memory clean-...

CVE-2015-3205: Improper Neutralization of Special Elements in Output Used by a Downstream Component

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."...

Libmimedir VCF Memory Corruption PoC

Libmimedir suffers from a memory corruption vulnerability. Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lead to exploitable conditions such as crafting a specific memory chunk to allow f...

[SECURITY] Fedora 22 Update: python-django-1.8.2-1.fc22

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

PT-2015-4162

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Services Platform versions prior to 2.71.00 Rockwell Automation FactoryTalk View Studio versions 8.00.00 and earlier Description The issue is related to an untrusted search path vulnerability in the Clean Utilit...

CVE-2014-9209: Undefined Security Weakness

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Possible Trojan Horse Detection (Known Service Banner Based)

Look for potential trojan horses based on known service banner responses. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...