8649 matches found
CVE-2017-2816
LibOFX 0.9.11 contains an exploitable buffer overflow in the tag parsing functionality. A crafted OFX file can cause a write out of bounds on the stack, potentially enabling remote code execution or a crash. Public advisories and CVE records consistently describe this vulnerability as CVE-2017-28...
Vulnerability Spotlight: LibOFX Tag Parsing Code Execution Vulnerability
This vulnerability was discovered by Cory Duplantis of TalosUpdate 9/20/2017: A patch is now available to fix this issue.OverviewLibOFX is an open source implementation of OFX Open Financial Exchange an open format used by financial institutions to share financial data with clients. As an...
PT-2017-15554 · Libofx +1 · Libofx +1
Name of the Vulnerable Software and Affected Versions: LibOFX version 0.9.11 Description: A buffer overflow issue exists in the tag parsing functionality. This can be triggered by a specially crafted OFX file, causing a write out of bounds and resulting in a buffer overflow on the stack. An...
libofx -- exploitable buffer overflow
Talos developers report: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this...
Fedora 25 : mimedefang (2017-15ad4721e3)
MIMEDefang 2.81 =============== - Don't barf if the installed version of Sys::Syslog has a developer tag added like 0.3301 on Debian Stretch. - Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael...
DEDECMS member center code submit defects can getshell
Preface : dedecms this year to update a lot of patches,the present article selected 20170315 patch for learning and research. Body: From the official website to download DEDECMS 20170315 patch using DIFF comparison tools for comparison: See the Red part, the servermsg1 variables appearing in dede...
CVE-2017-13726
There is a reachable assertion abort in the function TIFFWriteDirectorySec in LibTIFF 4.0.8, related to tifdirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack...
Ledger-CLI tag parsing buffer overflow vulnerability
Ledger is an accounting system that supports UNIX commands. A buffer overflow vulnerability in the Ledger-CLI tag parsing feature allows remote attackers to exploit the vulnerability by submitting a journal file and tricking a user into parsing it, which could crash the application or execute...
SQL Injection Vulnerability in SDCMS v1.2 Tag Lists
SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v1.2 version of the label list exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...
CVE-2017-2807
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability...
CVE-2017-2807
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability...
DEBIAN-CVE-2017-2807
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability...
Integer overflow
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability...
CVE-2017-2807
CVE-2017-2807 affects Ledger-CLI 3.1.1, with a buffer overflow in the tag value parsing component caused by an integer underflow when processing a crafted journal file. This can lead to code execution or other impact described in multiple advisories. Public sources in the connected docs confirm r...
Monero: TabNabbing issue (due to taget=_blank)
Hi team, i get to know in this particular url https://getmonero.org/get-started/what-is-monero/ and i found one 3rd party url. Issue lies Here : Here i can see you are using target=blank and no more rel tag. Here , target=blank means it will open in another new tab. but due to tabnabbing it can...
SQL Injection Vulnerability in MIPCMS ApiAdminTag.php Page
MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...
mpg123 'INT123_parse_new_id3' function integer overflow vulnerability
mpg123 on 32-bit platforms is a MPEG audio player and decoding library for 32-bit operating systems developed by software developer Michael Hipp.ID3 parser is one of the ID3 parsers. An integer overflow vulnerability exists in the 'INT123parsenewid3' function of the ID3 parser in versions of mpg1...
Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27442)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in the edit-tag feature in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. A remote attacker can exploit this...
Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27443)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in the edit-tag feature in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. A remote attacker can exploit this...