python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

An open-redirect flaw was found in the way Django's django.utils.http.issafeurl function filtered authentication URLs. An attacker able to trick a victim into visiting a crafted URL could use this flaw to redirect that victim to a malicious site...

Fedora 23 : nodejs-is-my-json-valid-2.12.4-1.fc23 (2016-25ab518a58)

Security fix for Regular expression DoS using utc-millisec format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 22 : nodejs-is-my-json-valid-2.12.4-1.fc22 (2016-3441e9da2f)

Security fix for Regular expression DoS using utc-millisec format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Design/Logic Flaw

The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.30, 3.31, 4.00, and 4.10 does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service TCP outage via vectors...

CVE-2016-1353

The CVE covers Cisco VDS-IS (Videoscape Distribution Suite for Internet Streaming) TCP session handling in FIN_WAIT state. Affected versions are 3.3(0), 3.3(1), 4.0(0), and 4.1(0). The root cause is improper TCP session management when a previous session is in FIN_WAIT, which can prevent starting...

CVE-2016-1353: Undefined Security Weakness

The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.30, 3.31, 4.00, and 4.10 does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service TCP outage via vectors...

CVE-2016-2537

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

Design/Logic Flaw

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

CVE-2016-2537

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

CVE-2016-2537

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

CVE-2016-2537: Improper Input Validation

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

PT-2016-5193

Name of the Vulnerable Software and Affected Versions is-my-json-valid versions prior to 2.17.2 is-my-json-valid versions prior to 1.4.1 Description The issue is related to an incorrect regular expression in the is-my-json-valid package, which can cause a denial of service blocked event loop via ...

PT-2016-5152

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.5.1 Description The issue is related to the improper validation of USB configuration descriptor objects in the is rndis function, which can be exploited by local guest OS administrators to cause a denial of service. Th...

Fedora Update for nodejs-is-my-json-valid FEDORA-2016-25

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: nodejs-is-my-json-valid-2.12.4-1.fc23

A JSONSchema validator that uses code generation to be extremely fast...

CVE-2016-0458

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Kernel DAX...

Regular Expression Denial of Service

Overview Versions of is-my-json-valid prior to 2.12.4 are affected by a regular expression denial of service vulnerability when user input is allowed into a utc-millisec validator. Recommendation Update to version 2.12.4 or later...

PHPads 2.0 File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

is-matrix.ru XSS vulnerability

Vulnerable URL: http://www.is-matrix.ru/index.php?PlaceSearch=InGoods=10=3==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4987029 Google Pagerank| 3 VIP website status:| No Chec...

PT-2017-6813

Name of the Vulnerable Software and Affected Versions Battle for Wesnoth versions prior to 1.12.4 Battle for Wesnoth versions 1.13.x prior to 1.13.1 Description The issue allows remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML, specifically...