604 matches found
UBUNTU-CVE-2018-6484
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...
[slackware-security] curl
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.58.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: HTTP authentication leak in redirects HTTP/2...
CURL-CVE-2018-1000005 HTTP/2 trailer out-of-bounds read
libcurl contains an out bounds read in code handling HTTP/2 trailers. It was reported that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once...
PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability
PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...
CVE-2017-17633
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17633
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17633
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
aice.org XSS vulnerability
Vulnerable URL: http://www.aice.org/trailers/newyork2014/qtpopup.php?name=Xss%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=Final%20Cut,%20USA,%20Inc.=Poster%20of%20%27A%20Streetcar%20Named%20Desire%27%20as%20an%20Urban%20Love%20Story%20=Co-Winner=PhillThumb02.png Details: Description| Value ---|-...
fagantrucktrailer.com XSS vulnerability
Vulnerable URL: http://www.fagantrucktrailer.com/preownedlist.asp?GroupBy=1%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=N=0=0=0===search=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
privatecasting-x.com XSS vulnerability
Open Bug Bounty ID: OBB-227943 Description| Value ---|--- Affected Website:| privatecasting-x.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
KINO.de Filme Trailer Programm - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application KINO.de Filme Trailer Programm published at the 'play' market has multiple vulnerabilities...
Moderate: Red Hat Security Advisory: httpd and httpd22 security update
Updated httpd and httpd22 packages that fix two security issues are now available for Red Hat JBoss Web Server 2.1.0 for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
httpd: bypass of mod_headers rules via chunked requests
A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header...
httpd: bypass of mod_headers rules via chunked requests
A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 security update
An update for Red Hat JBoss Web Server 2.1.0 that fixes four security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
DEBIAN-CVE-2015-8736
The mp2tfindnextpcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted file...
UBUNTU-CVE-2015-8736
The mp2tfindnextpcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted file...
httpd: bypass of mod_headers rules via chunked requests
A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header...
httpd: bypass of mod_headers rules via chunked requests
A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header...