PT-2015-3158

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.4 Description The issue arises from the ff dwt decode function in libavcodec/jpeg2000dwt.c not validating the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding. This allows...

PT-2015-3159

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.4 Description The issue is related to the ff get buffer function in libavcodec/utils.c, which preserves width and height values after a failure. This allows remote attackers to cause a denial of service out-of-boun...

PT-2015-7772

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.6.5 FFmpeg versions 2.7.x prior to 2.7.3 FFmpeg versions 2.8.x through 2.8.2 Description The issue is related to an integer overflow in the ff ivi init planes function, which can be triggered by crafted image...

PT-2015-6935

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a file with crafted dimensions. This is due to a problem in the ff h263...

PT-2015-7371

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2 Description The issue is related to multiple integer underflows in the ff mjpeg decode frame function, which can be exploited by remote attackers using crafted MJPEG data. This can lead to a denial of service due...

FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack

In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...

IE GC information leakage the vulnerability of the gossip-vulnerability warning-the black bar safety net

This vulnerability is several months earlier dion cow release, also recently got a pwnie award of the prize, the original speaking of the flash, ff, etc. of the GC engine are the use of conserved marker removal algorithm and are not tag data or pointer, so the presence of this problem, dion cattl...

Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns

No description provided by source. ================================================================================ Found : brainpillow Dork : Powered By IP.Board 3.0.0 Beta 5 Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail :...

Apache <= 2.2.6 'mod_negotiation' HTML Injection and HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27409/info Apache 'modnegotiation' is prone to an HTML-injection and an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

PT-2013-2659

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.1 Description The issue arises from the ff er frame end function in libavcodec/error resilience.c, which fails to properly verify that a frame is fully initialized. This allows...

Multiple Cross-Site-Scripting vulnerabilities in x3cms

Advisory: Multiple Cross-Site-Scripting vulnerabilities in x3cms Advisory ID: INFOSERVE-ADV2011-04 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on x3cms 0.4.3 other versions may also be affected Vendor URL: http://www.x3cms.net/ Vendor Status: Parti...

x3cms 0.4.3 Cross Site Scripting

Advisory: Multiple Cross-Site-Scripting vulnerabilities in x3cms Advisory ID: INFOSERVE-ADV2011-04 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on x3cms 0.4.3 other versions may also be affected Vendor URL: http://www.x3cms.net/ Vendor Status: Parti...

AShop - Open Redirection Cross-Site Scripting

AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...

Adobe Reader X 10.0.0 10.0.1 - Atom Type Confusion

Adobe Reader X 10.0.0 10.0.1 - Atom Type Confusion Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: Adobe Reader X It work reliably on IE9/FF4 and other browsers. The Arashi : http://abysssec.com/files/TheArashi.pdf...

Debian Security Advisory DSA 2000-1 (ffmpeg-debian)

The remote host is missing an update to ffmpeg-debian announced via advisory DSA 2000-1. OpenVAS Vulnerability Test $Id: deb20001.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2000-1 ffmpeg-debian Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

Debian: Security Advisory (DSA-2000-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2000-1 : ffmpeg-debian - several vulnerabilities

Several vulnerabilities have been discovered in ffmpeg, a multimedia player, server and encoder, which also provides a range of multimedia libraries used in applications like MPlayer : Various programming errors in container and codec implementations may lead to denial of service or the execution...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

Stash 1.0.3 Cross Site Scripting

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria http://english.islamweb.net/ Script Information: Script: Stash 1.0.3 Remote XSS Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/nice-stash/Stash%20CMS/1.0.3/stash-1.0.3.zip Vul Code: footer.inc.php: "My In...

Phorum过滤引擎HTML代码注入漏洞

BUGTRAQ: 35777 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的过滤引擎没有充分地验证某些BBcode参数，远程攻击者可以在所提交的请求中使用导致注入并执行恶意JavaScript代码。 Phorum 5.2.11 厂商补丁： Phorum ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phorum.org/phorum5/read.php?64,139411...