625 matches found
CVE-2015-7980
Cross-site scripting XSS vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable."...
CVE-2015-7980
CVE-2015-7980 affects the Compass Rose module for Drupal (6.x-1.x)—pre-6.x-1.1. The vulnerability is a cross-site scripting (XSS) flaw introduced by embedding a JavaScript library from an external source that was not reliable, enabling remote attackers to inject arbitrary script/HTML via unspecif...
CVE-2015-7980
Cross-site scripting XSS vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable."...
rose-plastic.com XSS vulnerability
Open Bug Bounty ID: OBB-316706 Description| Value ---|--- Affected Website:| rose-plastic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Pharos - Static Binary Analysis Framework
The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure developed by Lawrence Livermore National...
Pharos Static Binary Analysis Framework
The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure developed by Lawrence Livermore National...
Pharos: A Static Binary Analysis Framework
PenTestIT RSS Feed All of us know what static binary analysis means. It means that the analysis of the binary is performed without actually executing it. Almost two years ago, an open source framework - Pharos, was created by the Carnegie Mellon SEI, CERT Division in collaboration with the Lawren...
rose-team.com XSS vulnerability
Open Bug Bounty ID: OBB-281787 Description| Value ---|--- Affected Website:| rose-team.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
gSOAP open-source software development library aeration“green rose”vulnerability, millions of IoT devices in jeopardy-vulnerability warning-the black bar safety net
Remember a few days ago Avanti vending machines loopholes, leakage of a large amount of user information? It didn't take long, the other one for IoT device attacks appeared again, this time the recruitment is the development of IoT devices open-source software library that may affect millions of...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3567)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3567 advisory. - nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce Fields Orabug: 25986995 CVE-2017-7895 - KVM: x86: fix emulation of 'MOV SS, null...
Unbreakable Enterprise kernel security update
2.6.39-400.295.2 - nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce Fields Orabug: 25986995 CVE-2017-7895 2.6.39-400.295.1 - ocfs2/o2net: o2netlistendataready should do nothing if socket state is not TCPLISTEN Tariq Saeed Orabug: 25510857 - IB/CORE: sync the resouce access in fmrpool...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2017-3535)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3535 advisory. - RHEL: complement upstream workaround for CVE-2016-10142. Quentin Casasnovas Orabug: 25765786 CVE-2016-10142 CVE-2016-10142 - net: ping: check...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3533)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3533 advisory. - Revert 'x86/mm: Expand the exception table logic to allow new handling options' Brian Maly Orabug: 25790387 CVE-2016-9644 - Revert 'fix minor...
OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0058)
The remote OracleVM system is missing necessary patches to address critical security updates : - RHEL: complement upstream workaround for CVE-2016-10142. Quentin Casasnovas Orabug: 25765786 CVE-2016-10142 CVE-2016-10142 - net: ping: check minimum size on ICMP header length Kees Cook Orabug:...
openSUSE Security Update : the Linux Kernel (openSUSE-2017-246)
The openSUSE Leap 42.1 kernel to 4.1.38 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-7117: Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors...
PHP 5.0.0 - 'tidy_parse_file()' Buffer Overflow
Exploit for php platform in category local exploits 0day.today 2018-01-01...
PHP 5.0.0 - 'tidy_parse_file()' Local Buffer Overflow
...
PHP 5.0.0 - snmpwalkoid() Local Denial of Service
PHP 5.0.0 - snmpwalkoid Local Denial of Service...