CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs,...

Linux Kernel < 4.4.0-21 (Ubuntu 16.04 x64) - 'netfilter target_offset' Local Privilege Escalation

/ EDB Note: Download https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44300.zip Video https://www.youtube.com/watch?v=qchiJn94kTo / / decr.c / / Ubuntu 16.04 local root exploit - netfilter targetoffset OOB checkcompatentrysizeandhooks/checkentry Tested on...

SUSE-SU-2016:1528-1 Security update for openssh

openssh was updated to fix three security issues. These security issues were fixed: - CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to...

PSF-2016-1 ssl.match_hostname() IDNA issue

The ssl.matchhostname function in CPython aka Python before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

pcre: stack overflow caused by mishandled group empty match (8.38/11)

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service stack-based buffer overflow via a crafted regular expression, as demonstrated by /^?:?1\.|^\\W?++$/...

FFmpeg remote file stealing vulnerabilities – moving end of the safety analysis report-vulnerability warning-the black bar safety net

0x1 vulnerability of origin FFmpeg remote file stealing vulnerabilities original source is Foreign vulnerability of the platform,the last year has been in the CTF match is used. Official in January of this year released the fixed version and published the vulnerability number CVE-2 0 1 6-1 8 9...

cartoonnetworkmatchattax.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-153259 Description| Value ---|--- Affected Website:| cartoonnetworkmatchattax.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2016-2518

The MATCHASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value...

Gummies Match 3 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Gummies Match 3 published at the 'play' market has multiple vulnerabilities...

Craftsman - match 3 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Craftsman - match 3 published at the 'play' market has multiple vulnerabilities...

KIDS SHAPES MATCH for Toddlers - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application KIDS SHAPES MATCH for Toddlers published at the 'play' market has multiple vulnerabilities...

Color Match: Dots - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Color Match: Dots published at the 'play' market has multiple vulnerabilities...

Match It Up 2 for toddlers - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Match It Up 2 for toddlers published at the 'play' market has multiple vulnerabilities...

Robot match - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Robot match published at the 'play' market has multiple vulnerabilities...

Match Jong - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Match Jong published at the 'play' market has multiple vulnerabilities...

Kids Game – Memory Match Food - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kids Game – Memory Match Food published at the 'play' market has multiple vulnerabilities...

Booya ! Match the monsters ! - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Booya ! Match the monsters ! published at the 'play' market has multiple vulnerabilities...

My MiniFigures Match for Lego - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application My MiniFigures Match for Lego published at the 'play' market has multiple vulnerabilities...

Mahjong Match Touch - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mahjong Match Touch published at the 'play' market has multiple vulnerabilities...

Darts Match - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Darts Match published at the 'play' market has multiple vulnerabilities...