1600 matches found
tamildiction.org XSS vulnerability
Vulnerable URL: http://tamildiction.org/verbdictionary/index.php?verb=1/-///'/"//--...
Foxit PDF Reader JBIG2 Symbol Dictionary Out of Bounds Read (CVE-2016-8334)
An out-of-bounds vulnerability has been reported in the JBIG2 component of Foxit PDF Reader. This vulnerability is due to improper processing of Symbol Dictionary segment in an embedded JBIG2 image. A remote attacker could exploit this vulnerability by enticing a victim user to visit a malicious...
Cameradar - An RTSP Surveillance Camera Access Multitool
Cameradar hacks its way into RTSP CCTV cameras Cameradar allows you to: Detect open RTSP hosts on any accessible target Get their public info hostname, port, camera model, etc. Launch automated dictionary attacks to get their stream route for example /live.sdp Launch automated dictionary attacks ...
Debian DLA-904-1 : uzbek-wordlist update
The dictionary provided by this package had an unnecessary unversioned conflict against the thunderbird package which recently got reintroduced into Wheezy. For Debian 7 'Wheezy', this problem has been fixed in version 0.6-3.2+deb7u1. We recommend that you upgrade your uzbek-wordlist packages...
[SECURITY] [DLA 903-1] hunspell-en-us update
Package : hunspell-en-us Version : 20070829-6+deb7u1 The dictionary provided by this package had an unnecessary unversioned conflict against the thunderbird package which recently got reintroduced into Wheezy. For Debian 7 "Wheezy", this problem has been fixed in version 20070829-6+deb7u1. We...
DLA-903-1 hunspell-en-us - update
Bulletin has no description...
Creating a backup storage dump
Purpose This article documents how to create a "storage dump" from a Veeam backup file. The storage dump is a human-readable output of the backup file's metadata containing: Backup file parameters FIB files-in-backup hierarchy FIB blocks map Offset / size / compression type of data blocks...
UBUNTU-CVE-2017-7885
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...
Urban Dictionary: Source Code Disclosure
URL http://www.urbandictionary.com/phpinfo.php Identified Source Code An attacker can obtain server-side source code of the web application, which can contain sensitive data - such as database connection strings, usernames and passwords - along with the technical and business logic of the...
financial-dictionary.thefreedictionary.com XSS vulnerability
Vulnerable URL: http://financial-dictionary.thefreedictionary.com/s/'"--!'...
Cross-Site Scripting
Overview Affected versions of i18next allow untrusted user input to be injected into dictionary key names, resulting in a cross-site scripting vulnerability. Proof of Concept var init = i18n.initdebug: true, function var test = i18n.t'firstName lastName', escapeInterpolation: true, firstName:...
Cross-site Scripting (XSS)
i18next is vulnerable to cross-site scripting XSS attacks. The interpolation resolution code in translate.js loops over each key in the dictionary and applies replacements one at a time. It is possible for an untrusted user to input the name of another key in the dictionary. Along with the...
Collins German Dictionary - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Collins German Dictionary published at the 'play' market has multiple vulnerabilities...
CVE-2016-10116
NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote...
CVE-2016-10116
NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote...
Design/Logic Flaw
NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote...
CVE-2016-10116
The vulnerability affects NETGEAR Arlo family devices: Arlo base stations (firmware <= 1.7.5_6178), Arlo Q cameras (firmware <= 1.8.0_5551), and Arlo Q Plus cameras (firmware
CVE-2016-10116
NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote...
FTP Password Recovery - Command-line Lost or Forgotten FTP Password Finder Tool for Windows
FTP Password Recovery is a free command-line tool to find your lost or forgotten FTP password for any FTP server. It automatically detects if the target FTP server allows any Anonymous without password connections. In case your FTP server is running on different port other than port 21 then you c...