Buffer overflow

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

UBUNTU-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:0197-1)

This update for openssl-11 fixes the following issues : Security issues fixed : The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations bsc1117951 Fix FIPS RSA generator bsc1118913 Note that Tenable Network Security has extracted the preceding description block directly from the...

Command execution vulnerability in Bell Optical Cat backend dd***.cgi file

Nokia Bell Shanghai is a company that provides end-to-end information and communication solutions and high-quality services to carrier and non-carrier customers. A command execution vulnerability exists in the dd.cgi file in the background of Bell Fiber Optic Cats, which can be exploited by...

CVE-2018-20562

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/articlecategory.php?rec=update has XSS via the catname parameter...

DEBIAN-CVE-2018-19497

In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service SEGV on unknown address with READ memory access in a tskgetu16 call in hfsdiropenmetacb in tsk/fs/hfsdent.c...

c17.cat XSS vulnerability

Open Bug Bounty ID: OBB-704860 Description| Value ---|--- Affected Website:| c17.cat Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

PT-2018-14975 · Tsk +1 · The Sleuth Kit +1

Name of the Vulnerable Software and Affected Versions: The Sleuth Kit TSK versions 4.6.4 and earlier Description: The issue allows attackers to cause a denial of service. It is related to the function hfs cat traverse in tsk/fs/hfs.c, which does not properly determine when a key length is too...

cat-press.com XSS vulnerability

Open Bug Bounty ID: OBB-691105 Description| Value ---|--- Affected Website:| cat-press.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Linux/x86 - execve(/bin/cat /etc/ssh/sshd_config) Shellcode 44 Bytes

/ Linux/x86 - execve/bin/cat /etc/ssh/sshdconfig Shellcode 44 Bytes Author: Goutham Madhwaraj Tested on: i686 GNU/Linux Shellcode Length: 44 ShoutOut - BarrierSec gcc -fno-stack-protector -z execstack loader-bind.c -o Disassembly of section .text: 08048080 : 8048080: 31 c0 xor eax,eax 8048082: 50...

AZL-7014 CVE-2018-17828 affecting package zziplib for versions less than 0.13.69-8

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. dot dot in a zip file, because of the function unzzipcat in the bins/unzzipcat-mem.c file...

PT-2018-14208

Name of the Vulnerable Software and Affected Versions ZZIPlib version 0.13.69 Description The issue allows attackers to overwrite arbitrary files via a .. dot dot in a zip file. This is due to the unzzip cat function in the bins/unzzipcat-mem.c file. Recommendations For ZZIPlib version 0.13.69,...

cat-on.com XSS vulnerability

Open Bug Bounty ID: OBB-677695 Description| Value ---|--- Affected Website:| cat-on.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Linux/x86 - Execve /bin/cat /etc/passwd Shellcode (37 bytes)

Linux/x86 - Execve /bin/cat /etc/passwd Shellcode 37 bytes. Shellcode exploit for Linuxx86 platform...

Wutong Cat Mall mobile app has logic design flaws

Sycamore Cat Mall Mobile App is an online shopping mall software. There is a logic design vulnerability in Wutong Cat Mall Mobile APP. Attackers can register any account by grabbing packets to get the verification code...

cat-coiffeur.de XSS vulnerability

Open Bug Bounty ID: OBB-594237 Description| Value ---|--- Affected Website:| cat-coiffeur.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Piwigo cross-site scripting vulnerability (CNVD-2018-06555)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the admin panel in Piwigo version 2.9.3. A remote attacker can exploit th...

canal10.cat XSS vulnerability

Open Bug Bounty ID: OBB-574936 Description| Value ---|--- Affected Website:| canal10.cat Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

web1.carparts-cat.com XSS vulnerability

Open Bug Bounty ID: OBB-573677 Description| Value ---|--- Affected Website:| web1.carparts-cat.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

creamap.llull.cat XSS vulnerability

Open Bug Bounty ID: OBB-572252 Description| Value ---|--- Affected Website:| creamap.llull.cat Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...