The vulnerability of the parse_hid_report_descriptor function (drivers/input/tablet/gtco.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

The vulnerability of the dvb_frontend_free function (drivers/media/dvb-core/dvb_frontend.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the dvbfrontendfree function located in the drivers/media/dvb-core/dvbfrontend.c file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02389)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

The vulnerability of the ptp_unpack_OPL function in the libmtp library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ptpunpackOPL function in the libmtp library exists due to a mistake related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code when a mobile device is connected via a USB cable...

LabF nfsAxe 3.7 FTP Client Stack Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LabF nfsAxe 3.7 FTP Client Stack Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in the LabF nfsAxe 3.7 FTP Client...

LabF nfsAxe 3.7 FTP Client - Stack Buffer Overflow Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LabF nfsAxe 3.7 FTP Client Stack Buffer Overflow', 'Description' = %q This module exploi...

Huawei UPnP DeviceUpgrade command injection

Added: 01/02/2018 BID: 102344 Background Huawei home routers support the DeviceUpgrade service type over the Universal Plug and Play UPnP protocol to facilitate upgrading of firmware. Problem A remote authenticated attacker can execute arbitrary commands injected into the NewStatusURL XML element...

Samsung Internet Browser 6.2.01.12 SOP Bypass / UXSS

Samsung Internet Browser SOP Bypass/UXSS There is a Same Origin Policy bypass / Universal Cross Site Scripting issue in Samsung Internet Browser tested on latest version - 6.2.01.12. First of all, using the combination of MHTML and XSLT ends up resulting in a weird interaction. When you create an...

Huawei UPnP DeviceUpgrade command injection

Added: 01/02/2018 BID: 102344 Background Huawei home routers support the DeviceUpgrade service type over the Universal Plug and Play UPnP protocol to facilitate upgrading of firmware. Problem A remote authenticated attacker can execute arbitrary commands injected into the NewStatusURL XML element...

Samsung Internet Browser 6.2.01.12 SOP Bypass / UXSS

From: https://poctestblog.blogspot.co.uk/2017/12/samsung-internet-browser-sop-bypassuxss.html Samsung Internet Browser SOP Bypass/UXSS There is a Same Origin Policy bypass / Universal Cross Site Scripting issue in Samsung Internet Browser tested on latest version - 6.2.01.12. First of all, using...

universal-textiles.com XSS vulnerability

Open Bug Bounty ID: OBB-457127 Description| Value ---|--- Affected Website:| universal-textiles.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

[ASA-201712-8] chromium: cross-site scripting

Arch Linux Security Advisory ASA-201712-8 ========================================= Severity: High Date : 2017-12-16 CVE-ID : CVE-2017-15429 Package : chromium Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-546 Summary ======= The package chromium before versio...

SAP Business Warehouse Universal Data Integration Cross-Site Scripting Vulnerability

SAP Business Warehouse BW is an implementation of SAP's analytical data warehouse solution, Universal Data Integration UDI is a common data analysis interface. A cross-site scripting vulnerability exists in SAP BW UDI, which stems from the program's failure to adequately encrypt user input. A...

The vulnerability of the cdc_parse_cdc_header function in the Linux operating system’s kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the cdcparsecdcheader function in the Linux kernel’s drivers/usb/core/message.c file arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or other adverse effects through a...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Linux operating system’s kernel drivers/usb/core/config.c arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects by using a specially crafted USB device tha...

The vulnerability of the `usbSerialConsoleDisconnect` function (drivers/usb/serial/console.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbserialconsoledisconnect function in the Linux kernel’s drivers/usb/serial/console.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially crafted USB...

The vulnerability of the imon_probe function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the imonprobe function in the Linux kernel’s drivers/media/rc/imon.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause system failures or other adverse effects through a specially crafted USB device...

The vulnerability of the Linux operating system’s kernel (sound/usb/mixer.c) allows a hacker to cause a service failure or exert other effects.

The vulnerability of the Linux operating system’s kernel sound/usb/mixer.c is related to the use of memory after it is freed in sndusbmixerinterrupt. Exploiting this vulnerability can allow a attacker to cause service failures or other effects through a specially crafted USB device...

The vulnerability of the `usb_get_bos_descriptor` function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbgetbosdescriptor function in the Linux kernel’s drivers/usb/core/config.c file relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially created USB device...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Linux operating system’s kernel sound/core/seqdevice.c is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects through a specially crafted USB device...