UBUNTU-CVE-2018-5738

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...

oniguruma: Out-of-bounds stack read in match_at() during regular expression searching

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in matchat during regular expression searching. A logical error involving order of validation and access in matchat could result in an...

CVE-2018-9857

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

CVE-2018-9857

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

Design/Logic Flaw

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

CVE-2018-9857

CVE-2018-9857 concerns PHP Scripts Mall Match Clone Script 1.0.4. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the searchbyid.php “View Search By Id” screen in the product’s search field. Attackers can inject arbitrary scripts, as demonstrated by PoCs in the linked exploit r...

PHP Scripts Mall Match Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Match Clone Script is a matrimonial dating software from PHP Scripts Mall India. The program features live chat, privacy protection and member registration. A cross-site scripting vulnerability exists in PHP Scripts Mall Match Clone Script version 1.0.4. A remote attacker can...

Square 9 GlobalForms SQL Injection Vulnerability

Square 9 GlobalForms is a web form management software from Square 9 Softworks. The software collects Web form data and automatically populates it with keywords. A SQL injection vulnerability exists in the 'match' parameter in Square 9 GlobalForms version 6.2.x. A remote attacker could use this...

CVE-2018-8820

An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xpcmdshell. In some cases, the...

CVE-2018-8820

An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xpcmdshell. In some cases, the...

Rockstar Games: Stored XSS in Snapmatic + R★Editor comments

Summary provided by the Researcher, @europa . I requested the disclosure of what I hope is the final report regarding stored cross-site-scripting vulnerabilities on the Rockstar Games SocialClub, to also allow me to summarize the research that went into the other 5 reports. Have fun! Report 1 The...

Match Group Tinder iOS app and Tinder Android app information disclosure vulnerability

Match Group Tinder iOS app and Tinder Android app are both products of Match Group, Inc.Tinder iOS app is an online dating app based on iOS platform.Tinder Android app is an online dating app based on Android. A security vulnerability exists in the Match Group Tinder iOS app and Tinder Android ap...

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

Fedora Update for nodejs-balanced-match FEDORA-2017-2522df3526

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: nodejs-balanced-match-0.4.2-4.fc26

Match balanced character pairs, like "" and ""...

UBUNTU-CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

USN-3442-1 libxfont, libxfont1, libxfont2 vulnerabilities

It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2017-13720 It was discovered that libXfont incorrectly handled...

Race condition

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service season bans and SR losses for other users by leaving a competitive match at a specific time during the initial loading of that match...

CVE-2017-14748

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service season bans and SR losses for other users by leaving a competitive match at a specific time during the initial loading of that match...

CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTMFFIBMATCH is set, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via crafted system calls. NOTE: this does not...