3963 matches found
openSUSE Security Update : libgit2 (openSUSE-2017-213)
This update for libgit2 fixes the following issues : - CVE-2016-10130: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted bsc1019037. - CVE-2017-5338: When using the custom certificate callback or when using...
omniauth leaks authenticity token in callback params
In strategy.rb in OmniAuth before 1.3.2, the authenticitytoken value is improperly protected because POST in addition to GET parameters are stored in the session and become available in the environment of the callback phase...
CVE-2016-8655 kernel race condition vulnerability the Debug analysis-vulnerability warning-the black bar safety net
12 5 March, hilipPettersson published a piece that already exists Linux kernel up to 5 years of local mention the right vulnerability, affecting virtually all Linux mainstream distributions, a time limelight without the two, no less than some time ago of“Dirty Cow”in. For this black magic...
Unspecified Security Bypass Vulnerability in Drupal JavaScript Callback Handler
Drupal is the Drupal community maintained by a set of free , open source content management system developed in PHP language . JavaScript Callback Handler is an efficient Ajax Callback module . An unspecified security bypass vulnerability exists in the Drupal JavaScript Callback Handler module. A...
m.thecard.co.kr XSS vulnerability
Vulnerable URL: http://m.thecard.co.kr/mobile/event/EventReviewListProc.asp?jsoncallback=prompt/OPENBUGBOUNTY/...
langrenn.njaard.no XSS vulnerability
Vulnerable URL: http://langrenn.njaard.no/Sponsor/get?placeHolder=5=200000195=1896=0=0=prompt/OPENBUGBOUNTY/...
HDF5 Group libhdf5 H5T_COMPOUND Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0179 HDF5 Group libhdf5 H5TCOMPOUND Code Execution Vulnerability November 17, 2016 CVE Number CVE-2016-4333 Description HDF5 is a file format that is maintained by a non-profit organization, The HDF Group. HDF5 is designed to be used for storage and...
DEBIAN-CVE-2016-7912
Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...
Design/Logic Flaw
Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...
CVE-2016-7912
The CVE-2016-7912 entry describes a use-after-free in the Linux kernel involving ffs_user_copy_worker in drivers/usb/gadget/function/f_fs.c, prior to version 4.5.3. This flaw lets local users escalate privileges by accessing an I/O data structure after a callback, as documented in multiple source...
CVE-2016-7912
Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...
ipregistry.dmrights.com XSS vulnerability
Vulnerable URL: http://ipregistry.dmrights.com/counter/index.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...
te-kyu.com XSS vulnerability
Vulnerable URL: http://te-kyu.com/inc/twitteroauth/twitter.php?callback=prompt/OPENBUGBOUNTY/...
knarvikmila.no XSS vulnerability
Vulnerable URL: http://knarvikmila.no/Sponsor/get?placeHolder=5=200000195=1317=0=0=prompt/OPENBUGBOUNTY/...
help.objectiflune.com XSS vulnerability
Vulnerable URL: http://help.objectiflune.com/common/doctools/globals.php?jsoncallback=prompt/OPENBUGBOUNTY/...
profil.lindependant.fr XSS vulnerability
Vulnerable URL: http://profil.lindependant.fr/remote/bloc-newsletter.php?jsonCallback=prompt/OPENBUGBOUNTY/...
oxfam.org.au XSS vulnerability
Vulnerable URL: https://www.oxfam.org.au/my/profile/gettheuser?jsoncallback=prompt/OPENBUGBOUNTY/...
guatemalanadventure.com XSS vulnerability
Vulnerable URL: https://guatemalanadventure.com/SistemaGAV1/post.php?jsoncallback=prompt/OPENBUGBOUNTY/...
slarti.myfreeforum.org XSS vulnerability
Vulnerable URL: http://slarti.myfreeforum.org/screenshots/jscreen.php?jsoncallback=prompt/OPENBUGBOUNTY/...
turl.ca XSS vulnerability
Vulnerable URL: http://turl.ca/json.php?jsoncallback=prompt/OPENBUGBOUNTY/...