7638 matches found
onthesnow.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-604663 Description| Value ---|--- Affected Website:| onthesnow.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
April 17, 2018—KB4093120 (OS Build 14393.2214)
None None...
VK.com: Получение вечного доступа к Long Pool и авторизованой страницы сайта, если мы когда-либо были на аккаунте жертвы
Недостаточные проверки в боте «Молодец». Всего один раз утащив аккаунт, после того как пользователь вернет доступ к аккаунту, было можно читать обновления Long Poll https://vk.com/dev/usinglongpoll, а еще проще - читать все новые сообщения в личке жертвы без возможности ревока доступа с её сторон...
rocking-all-life-long.com XSS vulnerability
Open Bug Bounty ID: OBB-601738 Description| Value ---|--- Affected Website:| rocking-all-life-long.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Linux/x64 - x64 Assembly Shellcode (Generator)
!/usr/bin/env python Features: - Linux shellcode x64 assembly code generation - stack based smaller payload size - execve based - supports long commands meaning bigger than an x64 register - 64 bits - supports long parameters meaning bigger than an x64 register - 64 bits - one command only execve...
Greenhouse.io: Cache poisoning using NULL bytes and long URLs
This is related to a previous report I made https://hackerone.com/reports/326639. The same endpoint https://boards.greenhouse.io/embed/jobboard/js?for= is still vulnerable to arbitrary string injection, by terminating the customer key in the for parameter with a URL-encoded NULL byte i.e. %00,...
Ffmpeg Denial of Service Vulnerability (CNVD-2018-08525)
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A denial of service vulnerability exists in the export function of libavfilter/vfsignature.c in Ffmpeg 3.4.2 and earlier versions. A remote attack...
DEBIAN-CVE-2018-9841
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
UBUNTU-CVE-2018-9841
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
CVE-2018-9841
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
CVE-2018-9841
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
Code injection
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
CVE-2018-9841
The export function in libavfilter/vfsignature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a long filename...
UBUNTU-CVE-2018-9240
ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...
PT-2018-18924 · Music Player Daemon +2 · Ncmpc +2
Name of the Vulnerable Software and Affected Versions: ncmpc versions prior to 0.30 Description: The issue is related to a NULL pointer dereference flaw. If a user is using the chat screen and another client sends a long chat message, it could cause a crash and denial of service. Recommendations:...
VulnCheck KEV: CVE-2017-20149
The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on...
Long Range Zip Infinite Loop Vulnerability (CNVD-2018-07888)
Long Range Zip also known as lrzip is a compression utility that specializes in compressing large files. An infinite loop vulnerability exists in the runzipfd function of runzip.c in Long Range Zip also known as lrzip 0.631. A remote attacker could exploit this vulnerability via a specially craft...
CVE-2018-9058
In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...
CVE-2018-9058
In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...
DEBIAN-CVE-2018-9058
In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...