512 matches found
Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)
The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site...
SQL Injection via GeoJSON
Overview Affected versions of sequelize are vulnerable to SQL Injection in Models that have fields with the GEOMETRY DataType. This vulnerability occurs because single quotes in document values are not escaped for GeoJSON documents using STGeomFromGeoJSON, and MySQL GeoJSON documents using...
geometry-dash.wikia.com XSS vulnerability
Vulnerable URL: http://geometry-dash.wikia.com/wiki/Top10list:CoolestPortal?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.05.2016 Latest check for patch:| 05.05.2016 04:11 GMT Vulnerability type:| XSS Vulnerability status:| Public...
flash-plugin: multiple code execution issues fixed in APSB16-10
Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...
vnc-title NSE Script
Tries to log into a VNC server and get its desktop name. Uses credentials discovered by vnc-brute, or None authentication types. If realvnc-auth-bypass was run and returned VULNERABLE, this script will use that vulnerability to bypass authentication. See also: vnc-brute.nse realvnc-auth-bypass.ns...
Geometry Dash Lite - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Geometry Dash Lite published at the 'play' market has multiple vulnerabilities...
Geometry Dash Meltdown - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Geometry Dash Meltdown published at the 'play' market has multiple vulnerabilities...
geometry.stanford.edu XSS vulnerability
Vulnerable URL: http://geometry.stanford.edu/person.php?id=%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1116 Google Pagerank| 5 VIP...
X.Org X Server 'xkb/xkb.c' Information Disclosure Vulnerability
Xorg X Server is one of the X Window System display servers available on multiple platforms. X.Org X Server 'xkb/xkb.c' fails to properly handle XkbSetGeometry requests, allowing an attacker to exploit vulnerability-sensitive information...
DEBIAN-CVE-2014-8959
Directory traversal vulnerability in libraries/gis/GISFactory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter...
CVE-2014-8959
Directory traversal vulnerability in libraries/gis/GISFactory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter...
CVE-2014-8959
Directory traversal vulnerability in libraries/gis/GISFactory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter...
[SECURITY] Fedora 20 Update: kig-4.14.1-1.fc20
Interactive Geometry...
mysql: geometry query crashes mysqld (CPU July 2013)
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service crash via a crafted geometry feature that specifies a large number o...
Oracle MySQL Server Geometry Query Denial Of Service (CVE-2013-1861)
A denial of service vulnerability has been reported in MySQL database server...
Fedora Update for kig FEDORA-2013-13499
Check for the Version of kig OpenVAS Vulnerability Test Fedora Update for kig FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for katomic FEDORA-2013-13499
Check for the Version of katomic OpenVAS Vulnerability Test Fedora Update for katomic FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 17 Update: kig-4.10.5-1.fc17
Interactive Geometry...
[SECURITY] Fedora 17 Update: katomic-4.10.5-1.fc17
KAtomic is a fun and educational game built around molecular geometry. It employs a simplistic two-dimensional look at the elements which comprise a molecule. A molecule is disassembled into its separate atoms and scattered around the playing field. The player must reassemble the molecule in orde...