1039家校通驾校系统 /Handler/Product/StuList.ashx 文件信息泄露漏洞

No description provided by source...

Updated w3m packages fix security vulnerabilities

Updated w3m package fixes security vulnerability: A vulnerability was found in w3m package. A maliciously crafted html file opened with specific command could cause the application to crash rhbz1324348...

Ramui Forum Script SQL Injection Vulnerability

Ramui Forum Script is free PHP forum script. Ramui Forum Script suffers from a SQL injection vulnerability due to a lack of user input restrictions in /gb/include/page.php. An attacker is able to execute unfiltered SQL requests with malicious code...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the isofsrealreadzf function isofs.c in the FuseISO disk mounting software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination, or possibly have other effects due to the large size of the ZF...

CVE-2016-3982

OptiPNG contains an off-by-one error in bmp_rle4_fread() in pngxrbmp.c, affecting versions before 0.7.6. This defect can trigger a heap-based buffer overflow, potentially leading to denial of service or arbitrary code execution when processing crafted BMP/png images. Multiple connected sources co...

Original 100 Balls - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Original 100 Balls published at the 'play' market has multiple vulnerabilities...

DEBIAN-CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

Wireshark Denial of Service Vulnerability (CNVD-2016-01447)

Wireshark is the most popular network protocol parser. A denial-of-service vulnerability exists in version 2.0.x prior to Wireshark 2.0.2 that allows remote attackers to cause a denial of service via a crafted file...

CVE-2013-7447

Integer overflow in the gdkcairosetsourcepixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service crash via a large image file, which triggers a large...

F5 Networks BIG-IP : file vulnerability (SOL16875)

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2015-8737

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

JosephErnest Void Cross-Site Scripting Vulnerability

JosephErnest Void is a content management system CMS. A cross-site scripting vulnerability exists in the index.php script in versions of JosephErnest Void prior to 2015-10-02. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a specially...

CVE-2015-5742

Summary of CVE-2015-5742 : In Veeam Backup & Replication, the VeeamVixProxy component stored Local Administrator credentials in log files with world-readable permissions, enabling a local user to read sensitive data from logs. Affected versions are Veeam B&R prior to 8.0 Update 3. The issue arise...

Web Reference Database PHP Remote File Inclusion Vulnerability

Web Reference Database aka refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automatic indexing for scientific literature management. A PHP remote file inclusion vulnerability exists in the install.php script in Web Reference Databa...

CVE-2015-7716

libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873...

CVE-2015-6601

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 22935234...

台州市极速网络CMS /data/log/passlog.php 任意代码执行漏洞

先看根目录当中的login.php? $ISLOGIN = true; require "./includes/headinc.php"; registershutdownfunction'unionend'; if$action == 'logout' $unionuser = $unionpass = $gid = ''; //clearcookies; //$sessarr = array; $SESSIONsessarr = $sessarr = ''; sessionunregister'sessarr'; echo "meta http-equiv="refresh"...

CVE-2014-4651

It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to gain access to protected information.

The vulnerability of the Configuration Log File component of the Cisco TelePresence Video Communication Server software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to protected information by analyzing log...