BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

...

Op-browser Command Injection Vulnerability

op-browser is a module for opening browser windows and setting up proxies. A command injection vulnerability exists in op-browser 1.0.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary commands via the url function...

WordPress TownHub premium theme <= 1.0.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

DEBIAN-CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

UBUNTU-CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

elliptic-php competitive conditions issue vulnerability

elliptic-php is a PHP-based elliptic curve cryptographic library. A competitive condition issue vulnerability exists in versions of elliptic-php prior to 1.0.6, which can be exploited by an attacker to recover long-lived private keys...

Roundcube Webmail < 1.0.6, 1.1.x < 1.1.2 Directory Traversal Vulnerability

Roundcube Webmail is prone to a directory traversal vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2019-14281

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party...

bzip2 buffer overflow vulnerability

bzip2 is an open source compression/decompression application. A buffer error vulnerability exists in BZ2decompress in the decompress.c file in bzip2 1.0.6 and earlier versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating...

UBUNTU-CVE-2019-12900

BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors...

Path Traversal in http-live-simulator

Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6...

Cela Link CLR-M20 1.0.6 Information Disclosure

Exploit Title: Cela Link CLR-M20 sw version 1.0.6 - Information Disclosure Date: 2018-12-27 Exploit Author: Mr Winst0n Software Link: http://www.celalink.com Version: 1.0.6 Authentication Required: No Tested on: Linux This vulnerability allows information disclosure by appending...

Moderate severity vulnerability that affects org.apache.storm:storm-core

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons...

GHSA-898J-5CC8-CMF5 ZipSlip in org.apache.storm:storm-core

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...

Node.js third-party modules: [http-live-simulator] Path traversal vulnerability

Module module name: http-live-simulator version: 1.0.6 npm page: https://www.npmjs.com/package/http-live-simulator Description this vulnerability is a bypass for the one found in this report in version 1.0.5 Steps To Reproduce: 1- Install the module : npm install -g http-live-simulator 2- Run the...

ChemCMS Cross-Site Scripting Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in ChemCMS version 1.0.6, which can be exploited by remote attackers to insert and execute JavaScript code with the help of the 'Settings-Site Info' field...

CVE-2018-14923

A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback...

HRSale 1.0.6 Local File Disclosure Vulnerability

Exploit for php platform in category local exploits Exploit Title: HRSALE - HR Management PHP Script - LFD Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://hrsale.com Software Buy: https://www.codester.com/items/8599/hrsale-hr-management-php-script Demo:...

CVE-2018-0612

Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Apache Storm User Impersonation Vulnerability

Apache Storm is the United States Apache Apache Software Foundation, a set of Clojure Concurrent Programming Language developed using free open source distributed real-time computing system. A security vulnerability exists in Apache Storm versions 1.0.6 and earlier, 1.2.1 and earlier, and 1.1.2 a...