ggstory.com XSS vulnerability

Vulnerable URL: http://ggstory.com/shop/search.php?q=13'"105 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2778815 VIP website status:| No Coordinated Disclosure Timeline:...

elyan-dryer.com XSS vulnerability

Vulnerable URL: http://www.elyan-dryer.com/index.php?a=search=13'"220.ro=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...

microtechinno.com XSS vulnerability

Vulnerable URL: http://www.microtechinno.com/product/detail.php?id=13'"34 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16457321 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|-...

okb.at XSS vulnerability

Vulnerable URL: http://www.okb.at/bv/kontakt/formular.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1018389 VIP website status:| No Coordinated Disclosure Timeline:...

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

EMC CMCNE 11.2.1 Inmservlets.war FileUploadController Remote Code Execution

require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition 'james fitts' , 'License' = MSFLICENSE, 'References' =...

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow (Metasploit)

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Fatek Automation PLC WinProladder Stack-based Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Fatek Automation PLC...

PT-2017-13309

Name of the Vulnerable Software and Affected Versions Jasper version 2.0.13 Description The issue is related to an infinite loop in the jpc dec tileinit function, which can lead to a remote denial of service attack. Recommendations For Jasper version 2.0.13, consider applying a patch to fix the...

visitsweden.com XSS vulnerability

Vulnerable URL: https://visitsweden.com/explore/?q=%22%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscript%3E++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 248196 VIP...

doe.gov.np Open Redirect vulnerability

Vulnerable URL: http://doe.gov.np/site/language/swapLang/1/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 462085 VIP website...

PT-2017-13067

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process siz in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, conside...

PT-2017-13066

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process sot in jpc/jpc dec.c. This can lead to a remote denial of service attack by triggering an unexpected return value from jpc...

PT-2017-13072

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process siz in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, conside...

PT-2017-3395

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to errors in resource management within the Media Framework component of the Android operating system, specifically in the decoder/impeg2d dec hdr.c. This could allow a...

PT-2017-4091 · Jbig2Dec +2 · Jbig2Dec +2

Name of the Vulnerable Software and Affected Versions: jbig2dec version 0.13 Description: The issue is related to a NULL pointer dereference in the jbig2 huffman get function in jbig2 huffman.c. This can cause a crash, such as a segmentation fault, when parsing an invalid file. For example, the...

CVE-2016-9469

Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix...

UBUNTU-CVE-2016-9388

The rasgetcmap function in rasdec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

PT-2017-10105 · Jasper +4 · Jasper +4

Name of the Vulnerable Software and Affected Versions: JasPer versions prior to 1.900.14 Description: The issue allows remote attackers to cause a denial of service via a crafted image file. This is due to a problem in the ras getcmap function in ras dec.c. Recommendations: For versions prior to...

JasPer integer overflow vulnerability (CNVD-2017-03801)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcdectiledecode function in the jpcdec.c file in versions of JasPer prior to 1.900.12. A remote attacker could exploit this...