CVE-2018-5169

If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-unlinkable chrome page as one of the home page tabs. This vulnerability affects Firefox 60...

Integer Overflow or Wraparound

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound. An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an...

jira2.salt-solutions.de XSS vulnerability

Open Bug Bounty ID: OBB-604416 Description| Value ---|--- Affected Website:| jira2.salt-solutions.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-07084)

Mozilla Firefox browser Firefox is a free and open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in the 'moz-icon:' protocol in Mozilla Firefox. A remote user can send a specially crafted request to exploit the vulnerability to view...

UBUNTU-CVE-2018-5140

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox 59...

WordPress acurax-social-media-widget plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. acurax-social-media-widget plugin is used in one of the social media links to add plug-ins. A cross-site request...

FreeBSD : phpbb3 -- multiple issues (8e89a89a-fd15-11e7-bdf6-00e04c1ea73d)

phpbb developers reports : Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL. Deleting orphaned attachments w/ large number of orphaned attachments - Orphaned attachment deletion was improved to be able to delete them...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability (CNVD-2018-01256)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

CVE-2018-5664

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php socialicon1 parameter...

CVE-2018-5657

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...

PT-2018-17056

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title icon parameter i...

PT-2018-17063

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the social icon 1 parameter in the wp-admin/admin.php page. Recommendations For...

icon-icons.com XSS vulnerability

Open Bug Bounty ID: OBB-509439 Description| Value ---|--- Affected Website:| icon-icons.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

MGASA-2018-0057 Updated gnome-shell packages fix security vulnerability

Updated gnome-shell packages fix security vulnerability: gnome-shell through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information...

PT-2017-4038

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 59 Description The issue is related to the implementation of the "moz-icon:" protocol in Mozilla Firefox, which can be accessed through script in web content even when otherwise prohibited. This could allow for...

EximiousSoft GIF Creator v7.31 Handles ICO Images with Memory Corruption Vulnerability

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the ICO format. An attacker can cause the program to crash by constructing malformed ICO images...

Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing ICO Images (CNVD-2017-36513)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the ICO format. An attacker can cause the program to crash by constructing malformed ICO images...

Icon Time Systems RTC-1000 Cross-Site Scripting Vulnerability

The Icon Time Systems RTC-1000 is an electronic clock product from Icon Time Systems, USA. A cross-site scripting vulnerability exists in Icon Time Systems RTC-1000 version 2.5.7458 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the nameFirs...

Icon Time Systems RTC-1000 Firmware 2.5.7458 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Icon Time Systems RTC-1000 alert"xss"; ========================================================== PROOF OF CONCEPT - With valid credentials that has permissions to modify the employee records, access the employeelist...