CVE-2021-39362: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in ReCaptcha Solver 5.7. A response from Anti-Captcha.com, RuCaptcha.com, 2captcha.com, DEATHbyCAPTCHA.com, ImageTyperz.com, or BestCaptchaSolver.com in setCaptchaCode is inserted into the DOM as HTML, resulting in full control over the user's browser by these servers...

ReCaptcha Solver 跨站脚本漏洞

ReCaptcha Solver is a Google application plugin for automated validation of Google ReCaptcha V2. A cross-site scripting vulnerability exists in ReCaptcha Solver version 5.7, which stems from a response in setCaptchaCode being inserted into the DOM as HTML, giving full control over the user's...

PT-2021-4872

Name of the Vulnerable Software and Affected Versions ReCaptcha Solver version 5.7 Description A security issue was discovered in ReCaptcha Solver, related to the handling of responses from certain servers, including Anti-Captcha.com, RuCaptcha.com, 2captcha.com, DEATHbyCAPTCHA.com,...

CVE-2021-3200

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job, char resultp, int resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service...

libsolv 缓冲区错误漏洞

libsolv is a library for checking package dependencies. A buffer error vulnerability exists in libsolv, which stems from the fact that Solver testcaseread may cause a denial of service...

USN-4851-1: Libsolv vulnerabilities

It was discovered that Libsolv incorrectly handled certain malformed input. An attacker could use this issue to cause Libsolv to crash, resulting in a denial of service...

solidity:solc_noopt_ossfuzz: Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5750916210491392 Project: solidity Fuzzing Engine: afl Fuzz Target: solcnooptossfuzz Job Type: aflasansolidity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

h1-ctf: [H1-2006 2020] [Multiple Vulnerability] CTF Writeup - @abdilahrf_

As there is a private invite for the first 10 solver, i send only the flag now F851115 will complete my writeup on the next comment. Impact Controlling martenmickos account...

Description of the Microsoft Office for Mac 2011 14.1 Update

This article describes the Service Pack 1 14.1 updates for Office for Mac 2011.IntroductionMicrosoft has released security bulletins MS11-021 and MS11-022. These security bulletins contain all the relevant information about the security updates for Microsoft Office for Mac 2011 for Mac. To view t...

[SECURITY] [DLA 2088-1] libsolv security update

Package : libsolv Version : 0.6.5-1+deb8u1 CVE ID : CVE-2019-20387 Debian Bug : 949611 repodataschema2id in repodata.c in libsolv, a dependency solver library, had a heap-based buffer over-read via a last schema whose length could be less than the length of the input schema. For Debian 8 "Jessie"...

USN-3916-1: libsolv vulnerabilities

It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service...

Fedora 29 : createrepo_c / dnf / dnf-plugins-core / dnf-plugins-extras / etc (2019-1fccede810)

createrepoc - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past - Support of zchunk libcomps librepo - Add zchunk support libdnf - Enhance modular solver to handle enabled and default module streams differently RhBug:1648839 - Add support of wild car...

algebra.com XSS vulnerability

Open Bug Bounty ID: OBB-574571 Description| Value ---|--- Affected Website:| algebra.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hak5 WiFi Pineapple Preconfiguration Command Injection 2

This Metasploit module exploits a command injection vulnerability on WiFi Pineapples versions 2.0 and below and pineapple versions prior to 2.4. We use a combination of default credentials with a weakness in the anti-csrf generation to achieve command injection on fresh pineapple devices prior to...

Automatically Extracting Obfuscated Strings from Malware using the FireEye Labs Obfuscated String Solver (FLOSS)

Introduction and Motivation Have you ever run strings.exe on a malware executable and its output provided you with IP addresses, file names, registry keys, and other indicators of compromise IOCs? Great! No need to run further analysis or hire expensive experts to determine if a file is malicious...

Mathway - Math Problem Solver - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mathway - Math Problem Solver published at the 'play' market has multiple vulnerabilities...

AR Sudoku Solver - Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application AR Sudoku Solver published at the 'play' market has multiple vulnerabilities...

Math Help & Solver - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Math Help & Solver published at the 'play' market has multiple vulnerabilities...

MalMath: Step by step solver - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application MalMath: Step by step solver published at the 'play' market has multiple vulnerabilities...

Crossword Solver - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Crossword Solver published at the 'play' market has multiple vulnerabilities...