libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2017:2789 An update for samba is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Buffer overflow

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

CVE-2017-8259

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

CVE-2017-8259

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

URL globbing out of bounds read

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

Authentication flaw

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...

jackssmallengines.com XSS vulnerability

Vulnerable URL: https://www.jackssmallengines.com/jacks-parts-lookup/toro-model-locator.aspx/"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...

rolex.com XSS vulnerability

Vulnerable URL: https://www.rolex.com/ja/rolex-dealers/services-locator/japan=x/...

heronfoods.com XSS vulnerability

Vulnerable URL: http://www.heronfoods.com/site/storelocator?s=1=15page=8=0=M=UK="--!"wrapper-map-canvas Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1210686 VIP website status:| ...

Joomla Google Map Store Locator 4.4 SQL Injection

Exploit Title: Joomla! Component Google Map Store Locator v4.4 - SQL Injection Google Dork: inurl:index.php?option=comgooglemaplocator Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/google-map-store-locator/live-demo Demo:...

Joomla Google Map Store Locator 4.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Store Locator v4.4 - SQL Injection Google Dork: inurl:index.php?option=comgooglemaplocator Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy:...

Joomla! Component Google Map Store Locator 4.4 - SQL Injection

Joomla! Component Google Map Store Locator 4.4 - SQL Injection Exploit Title: Joomla! Component Google Map Store Locator v4.4 - SQL Injection Google Dork: inurl:index.php?option=comgooglemaplocator Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy:...

Joomla JSP Store Locator component id parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A sql injection vulnerability exists in the id parameter of the Joomla JSP Store Locator component. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Joomla JSP Store Locator 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy:...

Joomla JSP Store Locator 2.2 SQL Injection

Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/jsplocatio...

Joomla! Component JSP Store Locator 2.2 - id SQL Injection

Joomla! Component JSP Store Locator 2.2 - id SQL Injection Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy:...

Joomla! Component JSP Store Locator 2.2 - 'id' SQL Injection

Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/jsplocatio...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

Joomla Store Locator 2.3.1.0 Cross Site Scripting

Exploit Title: Joomla Component Store Locator 2.3.1.0 - Cross-site scripting Date: 2017-1-28 Home : https://extensions.joomla.org/extension/store-locator/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel ...