49 matches found
news18.com XSS vulnerability
Vulnerable URL: http://www.news18.com/livecricket/squad-ipl.php?tid=1379=3823%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E=eoin-morgan=hyderabad Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...
ImageMagick Denial of Service Vulnerability (CNVD-2017-04964)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the coders/ipl.c file in ImageMagick. A remote attacker can exploit this...
[SECURITY] [DSA 3799-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3799-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 01, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3799-1 (imagemagick - security update)
This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, IPL, MPC or PSB files are processed. OpenVAS Vulnerability Test...
PT-2016-3138 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to a missing malloc check in the coders/ipl.c component of ImageMagick, which can be exploited by remote attackers to have an unspecific impact. Recommendations: At...
ipl-dmzcust02.lab.wagerworks.com XSS vulnerability
Vulnerable URL: https://ipl-dmzcust02.lab.wagerworks.com/games/index.html?uniqueid=dc20b956=FPY=1.0=1.0=200-1194-003=en=TPAL=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
IBM OS/400 BrSmRcvAndCheck()远程溢出漏洞
BUGTRAQ ID: 29660 IBM OS/400是IBM网络服务器上所运行的操作系统。 IBM OS/400在modem端口上执行诊断时，IBM OS/400中由BrSmIntWrap所调用的BrSmRcvAndCheck函数未经长度检查便执行了memcpy操作。如果远程攻击者提交了超长参数的话，就可能触发缓冲区溢出，导致初始程序加载（IPL）bootstrap进程终止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
IBM OS/400 'BrSmRcvAndCheck()'缓冲区溢出漏洞
BUGTRAQ ID: 29660 IBM OS/400是一款AS/400机器上的操作系统。 IBM OS/400 'BrSmRcvAndCheck'存在缓冲区溢出，本地攻击者可以利用漏洞对服务进行拒绝服务攻击。 问题是由于memcpy时对长度缺少检查，攻击者可以利用此问题是IPL bootstrap进程停止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 可参考如下安全公告获得补丁信息：...
