Algolia: Stored XSS from Display Settings triggered on Save and viewing realtime search demo

Here are the steps to trigger the XSS: 1. Create a JSON record that will contain the following attribute: "": "XSS attribute" 2. Go to Indices - Display and select the attribute under Attributes for Faceting and click save. 3. Note that XSS is triggered multiple times on that page. 4. XSS is now...

minissdpd Denial of Service Vulnerability

minissdpd is a set of daemons for managing SSDP on Posix systems. A security vulnerability exists in minissdpd version 1.2.20130907-3, which stems from the program failing to properly handle array indexes. An attacker can exploit the vulnerability by sending invalid requests to cause a denial of...

Algolia: API Key added for one Indices works for all other indices too.

Hi, I created one API key and restricted it to only one index by adding it and gave it right for creating record. Now this api can be used to add records in other indeces in same account. Screenshot is attached...

libX11: Multiple Array Index error leading to heap-based OOB write

Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...

Equis MetaStock <= 11 Use After Free

No description provided by source. Luigi Auriemma Application: Equis MetaStock http://www.equis.com Versions: = 11 Platforms: Windows Bug: use after free Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

ElasticSearch Indices Enumeration Utility

This module enumerates ElasticSearch Indices. It uses the REST API in order to make it...

DEBIAN-CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to 1 RX or 2 TX queue numbers or 3 interrupt indices. NOTE: some of these details are obtained from third party information...

CVE-2013-4544

CVE-2013-4544 affects QEMU’s VMXNET3 NIC emulation (hw/net/vmxnet3.c) in versions including 2.0.0-rc0, 1.7.1 and earlier. The root cause is improper handling of queue/interrupt state for the VMXNET3 device, enabling a local guest user to trigger a denial of service or potentially execute arbitrar...

CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to 1 RX or 2 TX queue numbers or 3 interrupt indices. NOTE: some of these details are obtained from third party information...

UBUNTU-CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to 1 RX or 2 TX queue numbers or 3 interrupt indices. NOTE: some of these details are obtained from third party information...

UBUNTU-CVE-2014-0983

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/serverdispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromi...

PT-2014-2023 · Mozjpeg +8 · Mozjpeg +8

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo versions through 1.5.90 MozJPEG versions through 3.3.1 Description: The issue is related to a buffer over-read in the get 8bit row function in rdbmp.c of the libjpeg library. This can be exploited by a remote attacker to cause a...

Mandriva Linux Security Advisory : php (MDVSA-2012:065)

Multiple vulnerabilities has been identified and fixed in php : The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service application crash via a crafted application that uses a PDO driver for a...

DEBIAN-CVE-2007-3476

Array index error in gdgifin.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash and heap corruption via large color index values in crafted image data, which results in a segmentation fault...

security flaw

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service crash via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite...

DEBIAN-CVE-2004-0183

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service crash via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite...