5333 matches found
verify-www.com XSS vulnerability
Vulnerable URL: https://www.verify-www.com/siteinfo/norporchoreu.com/popup.php?name=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=news=50 Details: Description| Value ---|--- Patched:| Yes, at 11.09.2016 Latest check for patch:| 11.09.2016 20:52 GMT Vulnerability type:| XSS Vulnerability...
Android Security Bulletin—May 2016Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...
Allround Automations PL/SQL Developer < 11.0.6.1776 HTTP Insecure Update RCE
The version of Allround Automations PL/SQL Developer installed on the remote host is prior to 11.0.6.1776. It is, therefore, affected by a remote code execution vulnerability due to a failure to properly verify the origin or authenticity of update data sent via HTTP. A man-in-the-middle attacker...
CVE-2016-2085
The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack...
DEBIAN-CVE-2016-2085
The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack...
verify-com XSS vulnerability
Vulnerable URL: http://verify-www.com/siteinfo/forums.embarcadero.com/post!post.jspa?forumID=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:25 GMT Vulnerability type:| XSS Vulnerability...
Linux kernel 'evm_verify_hmac()' Side-Channel Information Disclosure Vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that can be exploited by a local attacker to perform a timing bypass attack and obtain sensitive information...
Nexus Security Bulletin—April 2016Stay organized with collectionsSave and categorize content based on your preferences.
We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Security Patch Levels of April 02, 2016 or later address these...
Android Rooting Application Emergency Patch
A rooting application has been found in the wild targeting Nexus mobile devices using a local privilege escalation vulnerability patched two years ago in the Linux kernel that remains unpatched in Android. Researchers at Zimperium, the same company that discovered last summer’s Stagefright flaws...
Google emergency release patches, to fix the Android system is high-risk to mention the right Vulnerability, CVE-2 0 1 5-1 8 0 5-the vulnerability warning-the black bar safety net
Google released emergency security patches to fix the impact of the Android operating system elevation of privilege vulnerability CVE-2 0 1 5-1 8 0 5 in. Affect all Nexus devices and part of Android Google has released an emergency security patch to fix the impact of the Android operating...
Zomato: Authentication Bypassing and Sensitive Information Disclosure on Verify Email Address in Registration Flow
The zomato.com web application is vulnerable to authentication bypassing and sensitive information disclosure. The flaw exist in “Verify Email Address” link which is received in a mail after registration. Once the user enters Full Name, Email Address and Password during registration, he/she is...
Android Security Advisory — 2016-03-18Stay organized with collectionsSave and categorize content based on your preferences.
Android Security Advisories are supplemental to the Nexus Security Bulletins. Refer to our summary page for more information about Security Advisories. Summary Google has become aware of a rooting application using an unpatched local elevation of privilege vulnerability in the kernel on some...
DEBIAN-CVE-2016-0800
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by...
PT-2016-1362
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1s OpenSSL versions prior to 1.0.2g Description The issue is related to the SSLv2 protocol, which requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA...
PT-2016-5009
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue concerns a timing side-channel attack that allows local users to forge MAC values. This is due to the evm verify hmac function in security/integrity/evm/evm main.c not properly copying...
UBUNTU-CVE-2016-2085
The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack...
McAfee Total Protection Denial of Service Vulnerability
McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A security vulnerability in McPvDrv.sys in McAfee File Lock for McAfee Total Protection allows a local attacker to explo...
Nexus Security Bulletin - February 2016Stay organized with collectionsSave and categorize content based on your preferences.
We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49G or later and Android M with Security Patch Level o...
PT-2016-4012
Name of the Vulnerable Software and Affected Versions McAfee File Lock versions 5.x Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service, resulting in a system crash. This is achieved via a large VERIFY INFORMATION.Length value i...
RSA package for Python spoofing vulnerability
RSA package for Python is a Python RSA implementation that supports encryption and decryption, signing and verifying signatures, key generation and more. The 'verify' function of Python-RSA has a security vulnerability that allows a remote attacker to forge signatures using special signature...