4814 matches found
Pornhub: Reflected XSS in Meta Tag
The researcher reported a reflected XSS bug in a meta tag in the search bar. XSS found with @the-useless-one! All details here: https://the-useless-one.github.io/posts/2017/03/28/meet-beautiful-xss-in-your-area-a-youporn-bug-bounty-sfw/...
DEBIAN-CVE-2016-10208
The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...
UBUNTU-CVE-2016-10208
The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...
[SECURITY] Fedora 24 Update: kernel-4.9.6-100.fc24
The kernel meta package...
[SECURITY] Fedora 25 Update: kernel-4.9.6-200.fc25
The kernel meta package...
puertogaitan-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-204087 Description| Value ---|--- Affected Website:| puertogaitan-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-10097
XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...
[SECURITY] Fedora 24 Update: kernel-4.8.15-200.fc24
The kernel meta package...
[SECURITY] Fedora 25 Update: kernel-4.8.15-300.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.8.14-200.fc24
The kernel meta package...
[SECURITY] Fedora 23 Update: kernel-4.8.13-100.fc23
The kernel meta package...
[SECURITY] Fedora 25 Update: kernel-4.8.13-300.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.8.12-200.fc24
The kernel meta package...
Cross-Site Scripting (XSS)
django-meta is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript due to the lack of escaping values before rendering...
Firefox - SVG cross domain cookie vulnerability （CVE-2016-9078）
Original link: http://insert-script.blogspot.jp/2016/12/firefox-svg-cross-domain-cookie.html Author: the Alex Inführ Translation: Holic know Chong Yu 404 Safety laboratory , this article has additions and changes Note: the vulnerability only affects Firefox 49 and 50 version, details see the...
[SECURITY] Fedora 24 Update: kernel-4.8.11-200.fc24
The kernel meta package...
BlueZ read-across-the-border vulnerability (CNVD-2016-11953)
BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'lemetaevdump' function in the tools/parser/hci.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability to read data across boundaries...
UBUNTU-CVE-2016-9803
In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...