Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

aero-expo.com Cross Site Scripting vulnerability OBB-1332403

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

newportaero.com Cross Site Scripting vulnerability OBB-1300704

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Unbreakable Enterprise kernel security update

4.14.35-1902.6.6 - RDMA/restrack: Protect from reentry to resource return path Leon Romanovsky Orabug: 30388717 4.14.35-1902.6.5 - hvnetvsc: fix vf serial matching with pci slot info Haiyang Zhang Orabug: 30373111 - rds: Use correct conn when dropping connections due to cancel Hakon Bugge Orabug:...

aero-expo.com XSS vulnerability

Open Bug Bounty ID: OBB-650154 Description| Value ---|--- Affected Website:| aero-expo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

inst-aero-spatial.org XSS vulnerability

Open Bug Bounty ID: OBB-637986 Description| Value ---|--- Affected Website:| inst-aero-spatial.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aero-net.com XSS vulnerability

Open Bug Bounty ID: OBB-613054 Description| Value ---|--- Affected Website:| aero-net.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aero-expo.com XSS vulnerability

Open Bug Bounty ID: OBB-572011 Description| Value ---|--- Affected Website:| aero-expo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

darttest.panasonic.aero XSS vulnerability

Open Bug Bounty ID: OBB-460465 Description| Value ---|--- Affected Website:| darttest.panasonic.aero Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

aero-expo.com XSS vulnerability

Open Bug Bounty ID: OBB-440381 Description| Value ---|--- Affected Website:| aero-expo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

aero-net.com XSS vulnerability

Vulnerable URL: http://www.aero-net.com/index.php?rub=1"...

aero-ibe.de XSS vulnerability

Vulnerable URL: http://www.aero-ibe.de/UI/Travelscout24/DEFLWaitForList.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4534244 VIP website status:| No Check aero-ibe.de SSL...

aero-news.net XSS vulnerability

Vulnerable URL: http://www.aero-news.net/index.cfm?do=main.home=7=prompt/OPENBUGBOUNTY/...

reservations.mahan.aero XSS vulnerability

Vulnerable URL: http://reservations.mahan.aero/ibe/public/showFlightSchedule.action?startDate=05%2F2014=THR=KSH=true〈=fa";alert'OPENBUGBOUNTY';=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:12 GMT Vulnerability type:| XSS Vulnerability...

aero-motive.com XSS vulnerability

Vulnerable URL: http://www.aero-motive.com/molex/news/displaynews.jsp?oid=1676=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Aero weather clock widget ◕‿◕ - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Aero weather clock widget ◕‿◕ published at the 'play' market has multiple vulnerabilities...

bleriot.aero Open Redirect vulnerability

Vulnerable URL: http://bleriot.aero/go/url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websit...

MS10-043: Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)

A flaw exists in the way the Microsoft Canonical Display Driver cdd.dll parses information copied from user mode to kernel mode. If the Windows Aero theme is enabled, an attacker who tricks a user on the affected host into viewing a specially crafted image using an application that uses the APIs...

Microsoft Windows cdd.dll驱动远程拒绝服务漏洞

BUGTRAQ ID: 40237 CVE ID: CVE-2009-3678 Windows是微软发布的非常流行的操作系统。 Windows所使用的规范显示驱动（cdd.dll）没有正确的解析从用户态拷贝到内核态的信息。用户受骗打开了包含有大量以缩略图形式显示图形文件的文件夹并同时选中删除了大约15到20张图形就会导致系统蓝屏死机。理论上利用该漏洞也可能导致执行任意代码，但由于地址是随机的，因此很难预测最终的指针目标。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 临时解决方法： 禁用Windows Aero主题。 厂商补丁：...

Windows 7 Hit by Display Driver Security Hole

A serious security vulnerability in Microsoft’s newest operating system could expose users to code execution and denial-of-service attacks, the company warned in an advisory issued late Tuesday. The vulnerability, which only affects Windows 7 and Windows Server 2008 R2, was publicly discussed ahe...