6365 matches found
Distributed Denial Of Service (DDoS)
botkit is vulnerable to distributed denial of service DDoS attacks. These attacks are possible because it does not validate the X-HUB signature sent in the headers against the facebook app secret. This allows attackers to send arrays with a large amount of data in them to botkit and lock the...
NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12908)
NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the kernel mode layer nvlddmkm.sys processor of DxgDdiEscape in all versions of the NVIDIA Windows GPU Display Driver, which arises from the...
DEBIAN-CVE-2016-5691
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of 1 pixel.red, 2 pixel.green, and 3 pixel.blue...
Zendesk: Unvalidated / Open Redirect
See title...
Moxa NPort Cross-Site Request Forgery Vulnerability
MOXA Nport is a serial communication server. A cross-site request forgery vulnerability exists in Moxa NPort. An attacker can exploit the vulnerability to launch a cross-site request attack because a user-submitted request is not validated...
OwnCloud 'file' app content spoofing vulnerability
OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany. A content spoofing vulnerability exists in the OwnCloud 'file' app due to the location bar in the file app failing to validate passed parameters, allowing an attacker to spoof a link to a fake directory...
Cisco Adaptive Security Appliance Command Injection Vulnerability
Cisco Adaptive Security Appliance ASA is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. The Cisco ASA suffers from a command injection vulnerability due to the progr...
Unvalidated Redirect in extension "TC Directmail" (tcdirectmail)
It has been discovered that the extension "TC Directmail" tcdirectmail is susceptible to Unvalidated Redirect. Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 3.1.2 and below...
CVE-2016-8810
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...
CVE-2016-8808
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without...
CVE-2016-8806
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x5000027 where a pointer passed from an user to the driver is used without...
CVE-2016-7387
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without...
Information modification vulnerability in multiple Samsung Galaxy devices
The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. The information modification vulnerability exists in Samsung Galaxy S4 to S7 devices and stems from the program's failure to validate BroadcastReceiver responses. An attacker could...
Denial of Service Vulnerability in Hitman Pro 3.7
Hitman Pro is an anti-spyware virus program. A denial of service vulnerability exists in Hitman Pro 3.7. In the driver for Hitman Pro 3.7, the driver's buffer pointer passed in from the application layer after calling DeviceIoControl is not tested to see if memory space is claimed, resulting in a...
Bumble: Unvalidated redirect on team.badoo.com
Domain affected: https://team.badoo.com/ corp.badoo.com PoC Tested on Firefox: https://team.badoo.com/%0d%0adata:text/html;text,%3Csvg%2fonload%3Dprompt%281%29%3E F129735 Describe: team.badoo.com may vulnerable to CRLF injection, when we inject %0d%0a into url, the Location header, entire content...
CVE-2016-7549
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash or possibly have unspecified other impact by leveragi...
Modoer review system admin.php cross-site script execution vulnerability
Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system version 20150505 cross-site scripting vulnerability exists in the background, due to the failure to limit the act parameters when loading...
LocalTapiola: Open redirection protection bypass (/cs/Satellite)
Issue The reporter found a vulnerability that allowed open and unvalidated redirects. Fix A fix was issued for the application. Reasoning "Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to...
Cisco WebEx Meetings Player Remote Code Execution Vulnerability
Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Player due to the program not properly validating user-supplied files. An unauthenticated remote user could exploit this vulnerability to execute arbitrary code with user privileges...
