eur-lex.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-644746 Description| Value ---|--- Affected Website:| eur-lex.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

LibSass 'lex' Function Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'lex' function of the parser.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption with the help of...

DEBIAN-CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

UBUNTU-CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11554

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

CVE-2017-11554

CVE-2017-11554 affects LibSass 3.4.5 (lex function in parser.hpp, as used by sassc). The vulnerability is a stack-consumption DoS triggered by crafted input, enabling remote denial of service. Multiple connected sources corroborate the issue and its impact. OpenSUSE/SUSE advisories and OSV/NVD en...

CVE-2017-11554: Uncontrolled Recursion

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

PT-2017-12098

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to a stack consumption vulnerability in the lex function, located in parser.hpp, which is used in sassc. This vulnerability can be triggered by a crafted input, leading to a remote denial ...

eur-lex.europa.eu XSS vulnerability

Vulnerable URL: http://eur-lex.europa.eu/legal-content/DA/TXT/?toc=%3C/SCript%3E%3CsvG/onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E=uriserv:OJ.C.2012.326.01.s002.01.DAN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:...

TK-Lex - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application TK-Lex published at the 'play' market has multiple vulnerabilities...

lex-line.com.ua Open Redirect vulnerability

Vulnerable URL: http://www.lex-line.com.ua/out.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:33 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3454737 Google...

@lex Guestbook <= 4.0.2 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php // | | header @lex Guestbook = 4.0.2 Remote Command Execution Exploit | header ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor |...

@lex Guestbook 5.0 Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in t...

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28520/info @lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

@lex Guestbook <= 4.0.5 - setup.php language_setup Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/28519/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow

Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the problem with the original unmodified file. The...

PT-2011-5196 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: SumatraPDF version 2.1.1 MuPDF version 1.0 Description: The issue allows remote attackers to cause an integer overflow in the lex number function via a corrupt PDF file. It is also caused by a signedness error in the pdf repair obj stm functi...

@lex Guestbook Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...