Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)

Binary data 9154.prm...

ATutor Cross-Site Scripting Vulnerability

ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. ATutor 2.2 and previous versions of cross-site scripting vulnerability , the vulnerability stems from...

innovaphone IP222 / IP232 Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-053 Product: innovaphone IP222/IP232 Manufacturer: innovaphone AG Affected Versions: 11r1s r2 Tested Versions: 11r1s r2 Vulnerability Type: Denial of Service CWE-730 Risk Level: Medium Solution Status: Fixed Manufacturer...

openSUSE Security Update : Mozilla Firefox (openSUSE-2016-259)

This update for MozillaFirefox fixes the following issues : - update to Firefox 44.0.2 - MFSA 2016-13/CVE-2016-1949 bmo1245724, boo966438 Same-origin-policy violation using Service Workers with plugins - Fix issue which could lead to the removal of stored passwords under certain circumstances...

h-net.msu.edu XSS vulnerability

Vulnerable URL: https://www.h-net.msu.edu/announce/show.cgi?ID=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

openSUSE Security Update : ffmpeg (openSUSE-2016-26)

This update to ffmpeg 2.8.4 fixes the following issues : - CVE-2015-8661: Denial of service via crafted .mov file boo960385 - CVE-2015-8662: Denial of service via crafted JPEG 2000 data boo960384 - CVE-2015-8663: Denial of service via crafted H.264 data boo960383 %NASLMINLEVEL 70300 C Tenable...

chinatelecom-h.com XSS vulnerability

Vulnerable URL: http://www.chinatelecom-h.com/cgi-bin/redirect.cgi?url=http://lolgonds.daw%27%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:17 GMT Vulnerability type:| XSS Vulnerability status:...

Credit Card Magstripe Spoofer: MagSpoof

MagSpoof is a device that can spoof/emulate any magnetic stripe or credit card. It can work “wirelessly”, even on standard magstripe/credit card readers, by generating a strong electromagnetic field that emulates a traditional magnetic stripe card. MagSpoof does not enable you to use credit cards...

GLSA-201512-07 : GStreamer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201512-07 GStreamer: User-assisted execution of arbitrary code A buffer overflow vulnerability has been found in the parsing of H.264 formatted video. Impact : A remote attacker could entice a user to open a specially crafted H.26...

Gentoo Security Advisory GLSA 201512-07

Gentoo Linux Local Security Checks GLSA 201512-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-8661

The h264sliceheaderinit function in libavcodec/h264slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other...

CVE-2015-8661

The h264sliceheaderinit function in libavcodec/h264slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other...

Out-of-bounds

The h264sliceheaderinit function in libavcodec/h264slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other...

CVE-2015-8661

The h264sliceheaderinit function in libavcodec/h264slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other...

CVE-2015-8661

The h264sliceheaderinit function in libavcodec/h264slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other...

h-dnorrkoping.se XSS vulnerability

Open Bug Bounty ID: OBB-106233 Description| Value ---|--- Affected Website:| h-dnorrkoping.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lesleyhphillips.co.uk XSS vulnerability

Vulnerable URL: http://www.lesleyhphillips.co.uk/shop/search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.12.2015 Latest check for patch:| 06.12.2015 08:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

CVE-2007-3642

The decodechoice function in net/netfilter/nfconntrackh323asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service crash via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer...

Bosch Security Systems Dinion NBN-498 XML Injection

Exploit Title: Bosch Security Systems - XML Injection - Dinion NBN-498 Web Interface Date: 01/09/2015 Exploit Author: neom22 Vendor Homepage: http://us.boschsecurity.com Data Sheet: http://resource.boschsecurity.us/documents/DatasheetenUS9007201286798987.pdf Version: Hardware Firmware 4.54.0026 -...

Bosch Security Systems Dinion NBN-498 Web Interface - XML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Bosch Security Systems - XML Injection - Dinion NBN-498 Web Interface Date: 01/09/2015 Exploit Author: neom22 Vendor Homepage: http://us.boschsecurity.com Data Sheet:...