299 matches found
Fedora 30 : php (2020-96cb012029)
PHP version 7.3.17 16 Apr 2020 Core: - Fixed bug php79364 When copy empty array, next key is unspecified. cmb - Fixed bug php78210 Invalid pointer address. cmb, Nikita CURL: - Fixed bug php79199 curlcopyhandle memory leak. cmb Date: - Fixed bug php79396 DateTime hour incorrect during DST jump...
Command Execution Vulnerability in D-Link DIR-816 A1
D-Link DIR-816 A1 is a wireless router from AUO Electronic Equipment Shanghai Co. A command execution vulnerability exists in the D-Link DIR-816 A1, which can be exploited to execute arbitrary commands by sending a POST request with the 'datetime' parameter to form2systime.cgi...
delpino73 Blue-Smiley-Organizer 1.32 SQL Injection
Exploit Title: delpino73 Blue-Smiley-Organizer 1.32 - 'datetime' SQL Injection Date: 2019-10-28 Exploit Author: Cakes Vendor Homepage: https://github.com/delpino73/Blue-Smiley-Organizer Software Link: https://github.com/delpino73/Blue-Smiley-Organizer.git Version: 1.32 Tested on: CentOS7 CVE : N/...
Denial Of Service (DoS)
numpy is vulnerable to denial of service. An attacker is able to produce a TypeError exception that leads to an application crash during unpickling, by entering a datetime object into a masked record array and causing one or more entries in the dtype to be |O4...
May 3, 2019—KB4495667 (OS Build 17763.475)
May 3, 2019—KB4495667 OS Build 17763.475 Applies To Windows 10, version 1809, all editions Windows Server 2019, all editions Improvements and fixes This update includes quality improvements. Key changes include: Allows the built-in Administrator account to run Microsoft Office setup after...
Denial Of Service (DoS)
PostgreSQL is vulnerable to denial of service attacks. An incorrect MAXDATELEN constant and datetime values allow remote authenticated attackers to cause system hang...
Vanilla: Stored XSS in Rich editor via Embed datetime
Summary: Rich embed posts can contain javascript URIs which when clicked will trigger javascript code. Description: Registered users can post content in forum posts, private messages and activity posts containing Rich embeds where the date/time of the embedded post when clicked, will trigger a...
Fedora 29 : php (2019-aa6036fcb3)
PHP version 7.2.14 10 Jan 2019 Core: - Fixed bug php77369 memcpy with negative length via crafted DNS response. Stas - Fixed bug php71041 zendsignalstartup needs ZENDAPI. Valentin V. Bartenev - Fixed bug php76046 PHP generates 'FEFREE' opcode on the wrong line. Nikita Date: - Fixed bug php77097...
Denial Of Service (DoS)
libgstreamer-1.0.so is vulnerable to denial of service. An out-of-bounds heap read in the gstdatetimenewfromiso8601string function in gst/gstdatetime.c allows remote attackers to cause a denial of service condition via a malformed datetime string...
DLA-1569-2 libdatetime-timezone-perl - regression update
Bulletin has no description...
D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02398)
D-Link DIR-816 is a home router product from AUO. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which stems from the program's use of the 'datetime' parameter value to construct the 'date -s "%s"' command, which can be exploited by an attacker to this...
CVE-2018-17066
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter...
CVE-2018-17066: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter...
PT-2018-3881 · D Link · D-Link Dir-816 A2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue exists in the handler function of the "/goform/form2systime.cgi" route, where an HTTP request parameter is used in command string construction. This could lead to command injection via...
CVE-2011-4971
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/misc/memcached.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:59+00:00| seen|...
ggc.edu XSS vulnerability
Open Bug Bounty ID: OBB-554376 Description| Value ---|--- Affected Website:| ggc.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lesfilmspelleas.com XSS vulnerability
Vulnerable URL: http://www.lesfilmspelleas.com/film.php?id=13'"117 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12349965 VIP website status:| No Coordinated Disclosure Timeline:...
gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()
The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...
smb2-time NSE Script
Attempts to obtain the current system date and the start date of a SMB2 server. Script Arguments randomseed, smbbasic, smbport, smbsign See the documentation for the smb library. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library. Examp...