87 matches found
fu-joe.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-549054 Description| Value ---|--- Affected Website:| fu-joe.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity
This post was co-authored by David Sánchez and Jérôme Segura We recently came across a campaign targeting a Saudi Arabia Government entity via a malicious Word document which at first reminded us of an attack we had previously described on this blog. In our previous research, we detailed how an...
See my how-to the Apache fuzzing and dig to a value of 1500 knife of vulnerability-vulnerability warning-the black bar safety net
Target In the AFL in the view of the Apache httpd server's crash logs, I found a lot of problems. For example, some crash testing with example in fuzz testing tools internal collapse, but also affect the test program stability. In this article, I will talk to you to explain the test case to crash...
CVE-2017-6763: Improper Input Validation
A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server CMS 2.1.4 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability exists because the affected application does not properly validate...
PT-2017-17301
Name of the Vulnerable Software and Affected Versions Cisco Meeting Server CMS version 2.1.4 Description A denial of service condition can be caused by an unauthenticated, remote attacker due to improper validation of Fragmentation Unit FU-A protocol packets in the H.264 protocol implementation. ...
RedHat Update for pki-core RHSA-2017:2335-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
English Fu the education system /VJ/PublicModule/MessageManage/Iframe_StuSend. aspx file pid parameter SQL injection vulnerability
No description provided by source...
Tree Fu Tom: Play and Learn - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Tree Fu Tom: Play and Learn published at the 'play' market has multiple vulnerabilities...
Kung Fu Do Fighting - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Kung Fu Do Fighting published at the 'play' market has multiple vulnerabilities...
Kung Fu Panda ProtectTheValley - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Kung Fu Panda ProtectTheValley published at the 'play' market has multiple vulnerabilities...
Gun Fu: Stickman 2 - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Gun Fu: Stickman 2 published at the 'play' market has multiple vulnerabilities...
CVE-2014-9444: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errorsfu-disallowed-mime-type0name parameter to the default URI...
PT-2015-4207
Name of the Vulnerable Software and Affected Versions Frontend Uploader plugin version 0.9.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the errorsfu-disallowed-mime-type0name parameter to the default URI...
Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit
No description provided by source. !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI...
GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow Vulnerability
No description provided by source. There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the script-fu server...
bogofilter -- heap corruption by invalid base64 input
David Relson reports: Fix a heap corruption in base64 decoder on invalid input. Analysis and patch by Julius Plenz, FU Berlin, Germany...
Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)
A buffer overflow vulnerability has been reported in the Script-Fu scheme interpreter server component of GIMP...
DEBIAN-CVE-2012-4245
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command...
