3719 matches found
Authentication Bypass Vulnerability in Multiple WiMAX Routers
WiMAX Worldwide Interoperability for Microwave Access, a communications technology based on the IEEE-802.16 standard, is an alternative to wired broadband services. An authentication bypass vulnerability exists in several WiMAX routers that use a customized httpd plug-in for libmtk MediaTek SDK...
Opera Max - Data manager - BSD license, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Opera Max - Data manager published at the 'play' market has multiple vulnerabilities...
JVN#70411623: WordPress plugin "MaxButtons" vulnerable to cross-site scripting
The WordPress plugin "MaxButtons" provided by Max Foundry contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer...
CVE-2017-8906
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...
Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
RUSTSEC-2017-0005 Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
PT-2017-15156
Name of the Vulnerable Software and Affected Versions cookie crate versions prior to 0.7.6 Description The issue arises when large integers are used in the Max-Age of a cookie, causing a panic. This occurs because affected versions of the crate use the time crate and the Duration::seconds method ...
Advantech B+B SmartWorx MESR901
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech B+B SmartWorx Equipment: MESR901 Vulnerability: Use of Client-Side Authentication AFFECTED PRODUCTS The following versions of MESR901, a Modbus gateway, are affected: MESR901 firmware versions 1.5.2 and prio...
Canlı TV Max Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Canlı TV Max Pro published at the 'play' market has multiple vulnerabilities...
Rockstar Games: XSS on rockstargames.com
Vulnerability description not provided...
Lifepark-Max - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Lifepark-Max published at the 'play' market has multiple vulnerabilities...
Denial Of Service (DoS)
netty-codec-http is vulnerable to denial of service DoS attacks. These attacks are possible because it does not respect the limit on max http header size. This is caused because control characters are indefinitely skipped and the parsing never ends...
VMSA-2016-0021:VMware product updates address partial information disclosure vulnerability
VMSA-2016-0021 VMware product updates address partial information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0021 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware product updates address partial informatio...
Waves Audio Service Privilege Escalation
Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio drivers dell default ones installs as a service with an...
Waves Audio Service - Unquoted Service Path Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio...
Service worker meeting notes
On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...
gadgets.ndtv.com XSS vulnerability
Vulnerable URL:...
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...
finishline.com XSS vulnerability
Vulnerable URL: http://www.finishline.com/nike-air-max?icid="-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| Yes, at 19.07.2017 Latest check for patch:| 19.07.2017 23:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4068 VIP website...
