SUSE-SU-2017:1632-1 Security update for tomcat6

This update for tomcat6 fixes the following issues: Tomcat was updated to version 6.0.53: The full changelog is: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html Security issues fixed: - CVE-2017-5647: A bug in the handling of pipelined requests could lead to information disclosure bsc10366...

heritagepropertyservices.co.uk XSS vulnerability

Vulnerable URL: http://www.heritagepropertyservices.co.uk/properties/gallery/?FormSearchText=York"'--!==geopoints=53.962301=-1.081884=9.5=1=gallery=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Google Chrome V8 Private Property Arbitrary Code Execution

// Source: https://github.com/secmob/pwnfest2016/ function exploit function tohexnum return num0.toString16; function intarraytodoubleintarr var uBuf = new Uint32Array2; var dBuf = new Float64ArrayuBuf.buffer; uBuf0=intarr0; uBuf1=intarr1; return dBuf0; function strtodoublestr//leng of str must b...

The butterfly effect and the program error---a slag-hole the use-vulnerability warning-the black bar safety net

Description A South American Amazon Basin rainforest butterfly, occasionally flapping a few wings, maybe in Texas cause a tornado? This I'm not sure I can determine is the program of any one of the minor errors after amplification are possible for the program to produce disastrous consequences...

Google Chrome - V8 Private Property Arbitrary Code Execution

Google Chrome - V8 Private Property Arbitrary Code Execution // Source: https://github.com/secmob/pwnfest2016/ function exploit function tohexnum return num0.toString16; function intarraytodoubleintarr var uBuf = new Uint32Array2; var dBuf = new Float64ArrayuBuf.buffer; uBuf0=intarr0;...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08077)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08076)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Libplist Local Denial of Service Vulnerability

libimobiledevice is a software protocol library and tool that allows Linux to support connectivity to iOS devices such as the iPhone, iPodTouch, etc. libplist is one of the libraries that handles the Apple Property List format in binary or XML format. A local denial of service vulnerability exist...

shook.com XSS vulnerability

Open Bug Bounty ID: OBB-240165 Description| Value ---|--- Affected Website:| shook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 24 Update: libplist-2.0.0-1.fc24

libplist is a library for manipulating Apple Binary and XML Property Lists...

[SECURITY] Fedora 25 Update: libplist-2.0.0-1.fc25

libplist is a library for manipulating Apple Binary and XML Property Lists...

Fedora 24 : pcre (2017-3b367c896f)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mde enabled. It also fixes a buffer overlflow in pcretest tool when copying a string in UTF-32 mode. Note that Tenable Network...

nobroker.in XSS vulnerability

Vulnerable URL: http://www.nobroker.in/property/rent/pune/Dhankawadi/?rent=0,200000"-confirmOPENBUGBOUNTY-"=lng=18.4616211,73.8505315=RK1=nbRank,desc=1=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

our.property.nhs.uk XSS vulnerability

Open Bug Bounty ID: OBB-232360 Description| Value ---|--- Affected Website:| our.property.nhs.uk Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

paragonproperty.com.au XSS vulnerability

Vulnerable URL: http://www.paragonproperty.com.au/wp-content/plugins/Realty/display/elements/formcontactagent.php?userid="'...

Brave URI Obfuscation Vulnerability

Brave is a Web browser product from Brave Software, Inc. in the United States. A URI obfuscation vulnerability exists in Brave version 0.12.4, which can be exploited by attackers to redirect users to malicious websites, resulting in the disclosure of personal information or property damage...

[SECURITY] Fedora 26 Update: libplist-2.0.0-1.fc26

libplist is a library for manipulating Apple Binary and XML Property Lists...

rentolease.co.uk XSS vulnerability

Vulnerable URL: http://www.rentolease.co.uk/BlogView.asp?SearchPhrase=BUY+TO+LET+ARLA+2014+Ayrshire+property+market%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E==123074==6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

Fedora 25 : pcre (2017-b4d4a46af6)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mde enabled. It also fixes a buffer overlflow in pcretest tool when copying a string in UTF-32 mode. Note that Tenable Network...

CVE-2017-3573

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows unauthenticated...