SUSE SLES12 Security Update : kernel (SUSE-SU-2017:3304-1)

This update for the Linux Kernel 3.12.60-5263 fixes several issues. The following security issues were fixed : - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

glibc ld.so - Memory Leak / Buffer Overflow Vulnerability

Exploit for linux platform in category local exploits Qualys Security Advisory Buffer overflow in glibc's ld.so ======================================================================== Contents ======================================================================== Summary Memory Leak Buffer...

CVE-2017-17590

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...

CVE-2017-17589

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...

CVE-2017-17588

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17586

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

CVE-2017-17587

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

CVE-2017-17589

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...

CVE-2017-17588

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17586

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

CVE-2017-17583

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...

Sql injection

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17573

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...

CVE-2017-17570

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...

Sql injection

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

Sql injection

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17573

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...

Sql injection

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...

CVE-2017-17576

FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter...