CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

ipregistry.dmrights.com XSS vulnerability

Vulnerable URL: http://ipregistry.dmrights.com/counter/index.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...

te-kyu.com XSS vulnerability

Vulnerable URL: http://te-kyu.com/inc/twitteroauth/twitter.php?callback=prompt/OPENBUGBOUNTY/...

knarvikmila.no XSS vulnerability

Vulnerable URL: http://knarvikmila.no/Sponsor/get?placeHolder=5=200000195=1317=0=0=prompt/OPENBUGBOUNTY/...

help.objectiflune.com XSS vulnerability

Vulnerable URL: http://help.objectiflune.com/common/doctools/globals.php?jsoncallback=prompt/OPENBUGBOUNTY/...

profil.lindependant.fr XSS vulnerability

Vulnerable URL: http://profil.lindependant.fr/remote/bloc-newsletter.php?jsonCallback=prompt/OPENBUGBOUNTY/...

oxfam.org.au XSS vulnerability

Vulnerable URL: https://www.oxfam.org.au/my/profile/gettheuser?jsoncallback=prompt/OPENBUGBOUNTY/...

guatemalanadventure.com XSS vulnerability

Vulnerable URL: https://guatemalanadventure.com/SistemaGAV1/post.php?jsoncallback=prompt/OPENBUGBOUNTY/...

slarti.myfreeforum.org XSS vulnerability

Vulnerable URL: http://slarti.myfreeforum.org/screenshots/jscreen.php?jsoncallback=prompt/OPENBUGBOUNTY/...

turl.ca XSS vulnerability

Vulnerable URL: http://turl.ca/json.php?jsoncallback=prompt/OPENBUGBOUNTY/...

jamtransfer.com XSS vulnerability

Vulnerable URL: http://www.jamtransfer.com/widget/data.php?callback=prompt/OPENBUGBOUNTY/...

kran-ts.ru XSS vulnerability

Vulnerable URL: http://kran-ts.ru/my/s3/captcha/get.php?callback=prompt/OPENBUGBOUNTY/...

php: Double free in _php_mb_regex_ereg_replace_exec

A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...

NVIDIA Driver - NvStreamKms Stack Buffer Overflow in PsSetCreateProcessNotifyRoutineEx Callback Priv

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=918 The NvStreamKms.sys driver calls PsSetCreateProcessNotifyRoutineEx to set up a process creation notification routine. In this particular routine, if cur-imagenamescount 0 ...

tylkodlazabawy.pl XSS vulnerability

Vulnerable URL: http://tylkodlazabawy.pl/login.php?callback=prompt/OPENBUGBOUNTY/...

DEBIAN-CVE-2016-7161

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet...

UBUNTU-CVE-2016-7161

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet...

CVE-2016-5663

Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...

CVE-2016-5663

Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...

Vulnerability in OpenSSL - Malformed SHA512 ticket DoS

If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a DoS attack where a malformed ticket will result in an OOB read which will ultimately crash. The use of SHA512 in TLS session tickets is comparatively rare as it requires a custom server callback and ticket lookup mechanism...