485 matches found
Sucuri: SSRF in sitecheck.sucuri.net
Hi, Sucuri Security Team. I found a SSRF in https://sitecheck.sucuri.net/ Although there was already an protection to prevent SSRF, but it can be bypassed by 302 redirection! ssrf.php https://sitecheck.sucuri.net/results/orange.tw/ssrf.php And your port will receive "HELLO WORLD" orange@z:$ nc -v...
Offline German Romanian Dict. - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Offline German Romanian Dict. published at the 'play' market has multiple vulnerabilities...
Free Dict German English - Base64 encoded String, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Free Dict German English published at the 'play' market has multiple vulnerabilities...
Offline German Italian Dict. - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Offline German Italian Dict. published at the 'play' market has multiple vulnerabilities...
Tib Dict - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application Tib Dict published at the 'play' market has multiple vulnerabilities...
[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
PT-2019-7249
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1 Description A buffer over-read issue occurs in the T1 Get Private Dict function within type1/t1parse.c due to a lack of checks on the new values of cur and limit before proceeding. This issue affects FreeType...
PT-2019-7340
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1 Description The issue is related to a heap-based buffer over-read in the T1 Get Private Dict function located in type1/t1parse.c. Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to...
UBUNTU-CVE-2015-6778
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
PT-2015-3253
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.3 Description The issue is related to a heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2. This allows context-dependent attackers to cause a denial of service via unspecified...
php: heap buffer overflow in enchant_broker_request_dict()
A heap buffer overflow flaw was found in the enchantbrokerrequestdict function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash...
[SECURITY] Fedora 22 Update: curl-7.40.0-5.fc22
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
php: heap buffer overflow in enchant_broker_request_dict()
A heap buffer overflow flaw was found in the enchantbrokerrequestdict function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash...
php: heap buffer overflow in enchant_broker_request_dict()
A heap buffer overflow flaw was found in the enchantbrokerrequestdict function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash...
[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
PHP Heap Buffer Overflow Vulnerability
PHP is a general purpose open source scripting language. A heap buffer overflow vulnerability exists in the enchantbrokerrequestdict function in PHP 5.6.5 and earlier versions, which can be exploited by a remote attacker to overwrite a 4-byte heap buffer and cause a denial of service or execute...
[SECURITY] Fedora 19 Update: curl-7.29.0-27.fc19
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
[SECURITY] Fedora 21 Update: mingw-curl-7.39.0-1.fc21
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
PT-2014-1945
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.38 PHP versions 5.5.x prior to 5.5.22 PHP versions 5.6.x prior to 5.6.6 Description The issue is related to a heap-based buffer overflow in the enchant broker request dict function. This allows remote attackers to...
[SECURITY] Fedora 19 Update: mingw-curl-7.37.0-1.fc19
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...