CVE-2019-19698

CVE-2019-19698 affects the libwav library (marc-q libwav) up to version 2017-04-20. The root cause is a NULL pointer dereference in wav_content_read() located in libwav.c, which can lead to a denial of service. Multiple sources (NVD, Red Hat, CVE databases, CNVD, PRION, CVELIST) corroborate the s...

CVE-2019-16348

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

Null pointer dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

CVE-2019-16348

CVE-2019-16348 affects marc-q’s libwav up to 2017-04-20, where a NULL pointer dereference occurs in the function referenced as gain_file() in wav_gain.c. The issue is documented as a NULL pointer dereference without publicly disclosed details on exploitation vectors within the provided sources. S...

marc-o-polo.com Cross Site Scripting vulnerability

Security Researcher k0t Helped patch 2132 vulnerabilities Received 9 Coordinated Disclosure badges Received 95 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting marc-o-polo.com website and its users. Following coordinated a...

WordPress Duplicate Page plugin <= 3.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Marc-Alexandre Montpas in WordPress Duplicate Page plugin versions = 3.3. Solution Update the WordPress Duplicate Page plugin to the latest available version at least 3.4...

marc-uzan-expertise-philatelie.com XSS vulnerability

Open Bug Bounty ID: OBB-620514 Description| Value ---|--- Affected Website:| marc-uzan-expertise-philatelie.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

Serial SWATter Tyler “SWAuTistic” Barriss Charged with Involuntary Manslaughter

Tyler Raj Barriss, a 25-year-old serial "swatter" whose phony emergency call to Kansas police last month triggered a fatal shooting, has been charged with involuntary manslaughter and faces up to eleven years in prison. Tyler Raj Barriss, in an undated selfie. Barriss's online alias -- "SWAuTisti...

marc-o-polo.com XSS vulnerability

Open Bug Bounty ID: OBB-280807 Description| Value ---|--- Affected Website:| marc-o-polo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Squid and Chips

The excellent Montreal chef Marc-Olivier Frappier, of Joe Beef fame, has created a squid and chips dish for Brit & Chips restaurant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Movie Portal Script 7.36 - Multiple Vulnerabilities

Movie Portal Script 7.36 - Multiple Vulnerabilities Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability Google Dork : - Date : 20/01/2017 Exploit Author : Marc Castejon Vendor Homepage : http://itechscripts.com/movie-portal-script/ Software Link: http://movie-portal.itechscripts.co...

VMSA-2016-0024:vSphere Data Protection (VDP) update addresses SSH key-based authentication issue

VMSA-2016-0024.1 vSphere Data Protection VDP updates address SSH Key-Based authentication issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0024.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: vSphere Data Protection VDP updates addres...

SQL Injection Vulnerability in Marc Parameters of Shenzhen Ketu Automation New Technology Application Company ilasIII Digital Library System xk/zdframe.jsp Page

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

Joomla HTTP Header Unauthenticated Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Joomla HTTP Header Unauthenticated Remote Code Execution', 'Description' = %q Joomla suffers from an unauthenticated remote code...

marc-challet.com XSS vulnerability

Vulnerable URL: http://www.marc-challet.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VI...

Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)

Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri...

Debian Security Advisory DSA 3332-1 (wordpress - security update)

Several vulnerabilities have been fixed in Wordpress, the popular blogging engine. CVE-2015-2213 SQL Injection allowed a remote attacker to compromise the site. CVE-2015-5622 The robustness of the shortcodes HTML tags filter has been improved. The parsing is a bit more strict, which may affect yo...

Debian DLA-48-1 : bind9 security update

Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from the Ubuntu Security team for USN-2081-1. NOTE: Tenable Network Security has extracted the...

Webmedia Explorer 6.13.1 Stored Cross Site Scripting Vulnerability

No description provided by source. Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor...

Ipswitch IMail 5.0/6.0 Web Service Buffer Overflow DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffret [email protected] has released the followi...