604 matches found
CVE-2018-14631
moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...
CVE-2018-14631
CVE-2018-14631 affects Moodle before versions 3.5.2, 3.4.5, and 3.3.8. The vulnerability arises in the Boost theme’s blog search: the GET parameter used for search is not sufficiently filtered, and the breadcrumb navigation rendered for search results can be exploited to perform a reflected Cross...
moodle -- multiple vulnerabilities
moodle reports: Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered...
boost/boost_regex_fuzzer: Crash in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5847161655787520 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5439484087762944 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
MGASA-2018-0220 Updated boost packages fix security vulnerability
A new, potential integer overflow security issue was discovered in Boost.Regex. This update uses a patch from Boost that fixes this potential issue...
Updated boost packages fix security vulnerability
A new, potential integer overflow security issue was discovered in Boost.Regex. This update uses a patch from Boost that fixes this potential issue...
Fedora Update for boost FEDORA-2018-b73bfea3af
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : boost (2018-b73bfea3af)
Updated Boost libraries are available that fix compatibility with CUDA 9.x compilers and fix a possible integer overflow in Boost.Regex. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
[SECURITY] Fedora 27 Update: boost-1.64.0-6.fc27
Boost provides free peer-reviewed portable C++ source libraries. The emphasis is on libraries which work well with the C++ Standard Library, in the hopes of establishing "existing practice" for extensions and providing reference implementations so that the Boost libraries are suitable for eventua...
Fedora Update for boost FEDORA-2018-97c275d576
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : boost (2018-97c275d576)
Updated Boost libraries are available that fix compatibility with CUDA 9.x compilers and fix a possible integer overflow in Boost.Regex. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
Denial Of Service (DoS) Through Integer Overflow
boost is vulnerable to denial of service DoS attacks. The estimatemaxstatecount function does not properly calculate and check the maxstatecount variable, leading to integer overflow...
scienceoflight.org XSS vulnerability
Open Bug Bounty ID: OBB-590156 Description| Value ---|--- Affected Website:| scienceoflight.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5753309638950912 Project: boost Fuzzer: aflboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: aflasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x101eb0115af2 Crash...
5 Proven Cyber Security Certifications That Will Boost Your Salary in 2018
By Alex Bennett Looking for which cyber security certifications you should get your This is a post from HackRead.com Read the original post: 5 Proven Cyber Security Certifications That Will Boost Your Salary in 2018...
Boost My Campaign 1.1 Information Disclosure
======================================================================================================= | Title : Boost My Campaign 1.1 Unauthenticated Administrative Access Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | |...
boost/boost_regex_fuzzer: Bad-cast to boost::detail::sp_counted_base from invalid vptr in boost::detail::shared_count::shared_count
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6612089117343744 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: Bad-cast Crash Address:...
boost/boost_regex_fuzzer: Bad-cast to boost::detail::sp_counted_baseboost::detail::shared_count::shared_count in boost::shared_ptr<boost::re_detail_NUMBER::named_subexpressions>::shared_ptr
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6395263733202944 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: Bad-cast Crash Address:...
Fast Followers Boost - Corrupted files, Exported components, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Fast Followers Boost published at the 'play' market has multiple vulnerabilities...