286 matches found
openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5746988237193216 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Cra...
openSUSE Security Update : compat-openssl098 (openSUSE-2018-1529)
This update for compat-openssl098 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation bsc1113652. - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses bsc1113534. - CVE-2016-8610: Adjusted curre...
openthread/radio-receive-done-fuzzer: Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629815537795072 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...
SUSE-SU-2018:2928-2 Security update for openssl
This update for openssl fixes the following issues: These security issues were fixed: - Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 - CVE-2018-0737: The RSA Key generation algorithm has been shown to be...
SUSE-SU-2018:2965-1 Security update for openssl-1_0_0
This update for openssl-100 to 1.0.2p fixes the following issues: These security issues were fixed: - Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 - CVE-2018-0737: The RSA Key generation algorithm has bee...
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:2928-1)
This update for openssl fixes the following issues : These security issues were fixed : Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 CVE-2018-0737: The RSA Key generation algorithm has been shown to be...
openSUSE Security Update : openssl (openSUSE-2018-1091)
This update for openssl fixes the following issues : These security issues were fixed : - Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 - CVE-2018-0737: The RSA Key generation algorithm has been shown to b...
PT-2018-2968 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.20 Description: The issue is related to errors in synchronization when using a shared resource, specifically a race condition in the smp task timedout and smp task done functions in the drivers/scsi/libsas/sas...
openthread/radio-receive-done-fuzzer: Index-out-of-bounds in ot::RouterTable::UpdateAllocation
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5160541604544512 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...
openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Mle::RouteTlv::GetRouteCost
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5295064105353216 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...
transmission-daemon -- vulnerable to dns rebinding attacks
Google Project Zero reports: The transmission bittorrent client uses a client/server architecture, the user interface is the client which communicates to the worker daemon using JSON RPC requests. As with all HTTP RPC schemes like this, any website can send requests to the daemon listening on...
openthread: Stack-buffer-overflow in ot::Coap::Header::FromMessage
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5722785030602752 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...
faqs.rssing.com XSS vulnerability
Vulnerable URL: http://faqs.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5764 VIP...
historyinhand.org XSS vulnerability
Vulnerable URL: http://www.historyinhand.org/ca-pawtucket/index.php/Search/Index?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...
Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action ite...
CVE-2008-5963
Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...
CVE-2008-5962
CVE-2008-5962 affects Gravity Getting Things Done (GTD) up to version 0.4.5. The vulnerability is in library/setup/rpc.php, where the objectname parameter can be crafted to trigger a directory traversal, allowing remote attackers to include and execute arbitrary local files. This is a classic loc...
CVE-2008-5963
Gravity GTD (Getting Things Done) up to version 0.4.5 is affected by an eval-injection vulnerability in library/setup/rpc.php that allows remote attackers to execute arbitrary PHP code via the objectname parameter. This CVE (CVE-2008-5963) is rated high by NVD (base score 10.0) with network attac...
gravitygtd-lfiexec.txt
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action items according to the principles...
Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking actio...