CVE-2017-17624

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

Sql injection

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

CVE-2017-17629

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

PT-2017-14925

Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...

PT-2017-14920

Name of the Vulnerable Software and Affected Versions PHP Multivendor Ecommerce version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "single detail.php" page using the sid parameter, or through the "category.php" page using the searchcat or chid1 parameters...

CVE-2017-17624: Improper Neutralization of Special Elements used in an SQL Command

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

PHP Multivendor Ecommerce 1.0 - 'sid' / 'searchcat' / 'chid1' SQL Injection

Exploit Title: PHP Multivendor Ecommerce 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/php-multivendor-ecommerce/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

Null pointer dereference

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

CVE-2017-17440

CVE-2017-17440 affects GNU Libextractor 1.6, where processing crafted GIF, IT, NSFE, S3M, SID, or XM files can trigger a NULL pointer dereference and crash (denial of service). Multiple advisories confirm the vulnerability in Libextractor 1.6 and note upstream fixes; a Debian/Arch/Mageia/Fedora/U...

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

PT-2017-14781

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.6 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file of specific formats, including GIF, IT, NSFE, S3M, SID, ...

[SECURITY] [DSA 3985-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3985-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3985-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3985-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3977-1] newsbeuter security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3971-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3971-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3923-1 (freerdp - security update)

Tyler Bohan of Talos discovered that FreeRDP, a free implementation of the Remote Desktop Protocol RDP, contained several vulnerabilities that allowed a malicious remote server or a man-in-the-middle to either cause a DoS by forcibly terminating the client, or execute arbitrary code on the client...

[SECURITY] [DSA 3914-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3914-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3891-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3891-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 22, 2017 https://www.debian.org/security/faq -...