Solaris 10 (sparc) : 152724-02 (deprecated)

GNOME 2.6.0: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 152724 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (x86) : 152725-02 (deprecated)

GNOME 2.6.0x86: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 152725 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (x86) : 152652-01 (deprecated)

GNOME 2.6.0x86: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 152652 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

so.571xz.com XSS vulnerability

Vulnerable URL: http://so.571xz.com/hzsearch.htm?keyword=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

PT-2017-17809

Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine Basic version 1.4 SP1 Schneider Electric Modicon TM221CE16R version 1.3.3.3 Description The issue concerns a hardcoded-key vulnerability in the Project Protection feature, which is used to prevent unauthorized acce...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-1028)

This update for MozillaFirefox, mozilla-nss fixes the following issues : Changes in MozillaFirefox : - Mozilla Firefox 48.0.1 : - Fixed an audio regression impacting some major websites bmo1295296 - Fix a top crash in the JavaScript engine bmo1290469 - Fix a startup crash issue caused by Websense...

Directory traversal

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory...

CVE-2016-6185

The CVE-2016-6185 issue involves Perl’s XSLoader::load potentially locating and loading a shared library from an incorrect location when called from a string eval, enabling arbitrary code execution by a local attacker via a Trojan horse library in the current working directory. Public reports (De...

CVE-2016-6185

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory...

How to Exploit libphp7. 0. so in Apache2-vulnerability warning-the black bar safety net

Before foreign cattle were made portion of the blog Double Free in the Standard PHP Library Double Link List CVE-2 0 1 6-3 1 3 2 Their article details the vulnerability causes $var1=new SplStack; $var1-offsetSet1 0 0,new DateTime'2000-01-01'; //DateTime will be double-freed...

Hollister So Cal Style - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hollister So Cal Style published at the 'play' market has multiple vulnerabilities...

SO Planning PHP Code Injection Vulnerability

SO Planning is a free and open source set of online project production and management tools. SO Planning suffers from a PHP code injection vulnerability that allows remote attackers to submit a special request, inject malicious code and execute it...

SO Planning Path Traversal Vulnerability

SO Planning is a free and open source set of online project production and management tools. SO Planning suffers from a path traversal vulnerability. An attacker can exploit this vulnerability to detect arbitrary remote files...

Simple Online Planning Tool 1.3.2 XSS / SQL Injection / Traversal

SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and prior Product description: SO Planning is an...

openSUSE Security Update : zeromq (openSUSE-SU-2014:1493-1)

zeromq was updated to version 4.0.5 to fix two security issues and various other bugs. These security issues were fixed : - Did not validate the other party's security handshake properly, allowing a man-in-the-middle downgrade attack CVE-2014-7202. - Did not implement a uniqueness check on...

CVE-2014-7686

The So. Co. Business Partnership aka com.ChamberMe.SCBPSOUTHERNCO application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The So. Co. Business Partnership aka com.ChamberMe.SCBPSOUTHERNCO application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7686

The CVE-2014-7686 entry affects the So. Co. Business Partnership Android app (version 3.2). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate....

CVE-2014-7686

The So. Co. Business Partnership aka com.ChamberMe.SCBPSOUTHERNCO application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

Use-after-free vulnerability in the CERTDestroyCertificate function in libnss3.so in Mozilla Network Security Services NSS 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger...