AuraDVD Ripper Professional 1.6.3 DLL Hijacking

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

Flv Player 2011 1.3 DLL Hijacking

Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Vulnerability Release Date: ============= 2016-09-23 Vulnerability Disclosure Timeline: ================================== 2016-09-30 : Public Disclosure Product & Service Introduction: =============================== FLV Player...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ===================================...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

Snort 2.9.7.0-WIN32 DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txt + ISR: ApparitionSec Vendor: ============= www.snort.org Product: =================== Snort v2.9.7.0-WIN32 Snort is an open-source, free and lightweight...

Zortam MP3 Studio v21.15 - Insecure File Permissions

Document Title: =============== Zortam MP3 Studio v21.15 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1963 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1963...

iPod Video Converter v1.34 - DLL Hijacking Exploit

Document Title: =============== iPod Video Converter v1.34 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1961 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1961...

Zortam MP3 Studio v21.15 - Insecure File Permissions

Document Title: =============== Zortam MP3 Studio v21.15 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1963 Release Date: ============= 2016-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 1963...

Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL regression (USN-3087-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3087-2 advisory. USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: http://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

3GP Player 4.7.0 - DLL Hijacking Vulnerability

Document Title: =============== 3GP Player 4.7.0 - DLL Hijacking Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1955 Release Date: ============= 2016-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 1955 Commo...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: https://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

RealEstate CMS 3.00.50 Cross Site Scripting

i?Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Web Vulnerability Release Date: ============= 2016-09-08 Vulnerability Disclosure Timeline: ================================== 2016-09-23 : Public Disclosure Product & Service Introduction: ===============================...

3GP Player 4.7.0 - DLL Hijacking Vulnerability

Document Title: =============== 3GP Player 4.7.0 - DLL Hijacking Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1955 Release Date: ============= 2016-09-22 Vulnerability Laboratory ID VL-ID: ==================================== 1955 Commo...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Several security fixes in this release, including: 641101 High CVE-2016-5170: Use after free in Blink.Credit to Anonymous 643357 High CVE-2016-5171: Use after free in Blink. Credit to Anonymous 616386 Medium CVE-2016-5172: Arbitrary Memory Read in v8. Credit to...

Heap-buffer-overflow in tt_size_select

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4667213659242496 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

PHPHolidays CMS 3.00.50 Cross Site Scripting

Document Title: =============== PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1948 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID:...

Boozt Fashion AB: Potential Subdomain Takeover Possible

Issue Description The researcher identified that the affected url points to sendgrid.net, via a DNS CNAME record. As a result of this an attacker could potentially initate a subdomain take over by registering the subdomain sendgrid.boozt.com on sendgrid and consiquently leverage this for further...

Heap-buffer-overflow in xmlDictComputeFastKey

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5408788102250496 Fuzzer: libFuzzerlibxml2readmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...