449 matches found
CVE-2017-17950
CVE-2017-17950 affects Cells Blog 3.5, where the pub_readpost.php ptid parameter enables SQL injection via user-supplied input. The vulnerability’s impact is described in multiple sources (e.g., NVD and CNVD) as allowing unauthorized access to data with partial to high severity. Exploitation deta...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17949
CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17948
Cells Blog 3.5 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the jfdname parameter in an act=showpic request. Multiple sources (NVD/NVD mirror, CNVD, Red Hat advisory, CNVD) corroborate the issue, describing XSS in Cells Blog 3.5 and the jfdname parameter pat...
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
Cells Blog 3.5 - bgid fmid fnid SQL Injection
Cells Blog 3.5 - bgid fmid fnid SQL Injection Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Senc...
Cells Blog 3.5 - 'bgid' / 'fmid' / 'fnid' SQL Injection
Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web: http://ihsan.net Author Social:...
UBUNTU-CVE-2017-8819
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...
CVE-2017-8819
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...
CVE-2017-8819
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...
Libxls Out-of-Bounds Write Vulnerability
libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the xlsmergedCells function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...
UBUNTU-CVE-2017-2896
An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...
PT-2016-3429 · Microsoft · Office Compatibility Pack +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version not specified Description: The issue is related to insufficient input validation in Microsoft Excel, allowing an attacker to execute...
Adding CIA to DNA
Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributor is Alexandrea Mellen. White and black hat hackers specialize in altering, accessing and sometimes destroying information. Genetic engineers take th...
Microcosmum: survival of cells - SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Microcosmum: survival of cells published at the 'play' market has multiple vulnerabilities...
Microsoft Internet Explorer empty-cells Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...
Updated tor packages fix security vulnerabilities
"disgleirio" discovered that a malicious client could trigger an assertion failure in a Tor instance providing a hidden service, thus rendering the service inaccessible CVE-2015-2928. "DonnchaC" discovered that Tor clients would crash with an assertion failure upon parsing specially crafted hidde...
MGASA-2014-0312 Updated tor package fixes security vulnerability
Tor before 0.2.4.23 maintains a circuit after an inbound RELAYEARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAYEARLY cells as a means of communicating information about hidden service name...
