2397 matches found
Synology Router Manager Path Traversal Vulnerability
Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A directory traversal vulnerability exists in SYNO.FileStation.Extract in versions of SRM prior to 1.1.5-6542-4. A remote attacker can exploit this vulnerability to write arbitrary files with th...
[SECURITY] Fedora 27 Update: fedora-arm-installer-2.1-1.fc27
Allows one to first select a source image local or remote. The image must be a binary file containing: MBR + Partitions + File Systems + Data. A destination block device should then be selected for final installation...
CVE-2017-15893
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
CVE-2017-15895
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager SRM before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
CVE-2017-15894
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
SyncBreeze Enterprise Arbitrary Code Execution Vulnerability
SyncBreeze is a fast, powerful and reliable file synchronization solution for local disks, network shares, NAS storage devices and enterprise storage systems. An arbitrary code execution vulnerability exists in Flexense SyncBreeze Enterprise 10.1.16. An attacker can trigger a buffer overflow by...
CVE-2017-15950
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...
CVE-2017-15950: Improper Restriction of Operations within the Bounds of a Memory Buffer
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...
PT-2017-14308
Name of the Vulnerable Software and Affected Versions Flexense SyncBreeze Enterprise version 10.1.16 Description The issue is related to a buffer overflow that can be exploited for arbitrary code execution. This is triggered by providing a long input into the Destination directory field, either...
CVE-2015-2749
Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...
CVE-2015-2749: URL Redirection to Untrusted Site
Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...
kernel: ipv4: Invalid IP options could cause skb->dst drop
A vulnerability was found in the Linux kernel where having malicious IP options present would cause the ipv4pktinfoprepare function to drop/free the dst. This could result in a system crash or possible privilege escalation...
PT-2017-4194
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1, 15.2, and 15.4 Cisco IOS XE versions 3.14 through 3.18 Description A vulnerability in the UDP processing code could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP...
The vulnerability of the Android CAF-release operating system, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Android CAF-release operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to create a situation where, when the mdssfbcopydestscalerdata function is called, the dsdatai.scale variable may still point to ...
Rockstar Games: Blind SSRF in emblem editor (2)
Hello, As per your recommendation in 233301, I'm submitting a PoC for another blind SSRF in the emblem editor. To oversight here is allowing absolute url values for the fill attribute: path fill="urlhttps://requestb.in/15rxmgv1test" stroke="a1a1a1" ... Upon publishing an emblem containing such an...
kernel: ipv4: Invalid IP options could cause skb->dst drop
A vulnerability was found in the Linux kernel where having malicious IP options present would cause the ipv4pktinfoprepare function to drop/free the dst. This could result in a system crash or possible privilege escalation...
Microsoft Outlook Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Outlook fails to properly validate authentication requests. To exploit the vulnerability an attacker would have to trick a user into browsing to a malicious website or to an SMB or UNC path destination. Alternatively the attacker could...
holidaypassports.com XSS vulnerability
Vulnerable URL: http://www.holidaypassports.com/destinationtemplate.asp?destinationid=1/-///'/"//--...
abbasanta.italy.topdestination.co.uk XSS vulnerability
Vulnerable URL: http://abbasanta.italy.topdestination.co.uk/?page=%22%3E%3CScRipT%3EalertOPENBUGBOUNTY%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
Proxmox Mail Gateway Open Redirect Vulnerability
Proxmox Mail Gateway is an e-mail gateway product from Proxmox Server Solutions, Austria. The product protects e-mail from virus, phishing and Trojan horse threats. An open redirection vulnerability exists in versions prior to Proxmox Mail Gateway hotfix 4.0-8-097d26a9. A remote attacker can...