CVE-2017-3052

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...

F5 Networks BIG-IP : Mailx vulnerabilities (K16945)

CVE-2014-7844 The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell meta characters in an email address. CVE-2004-2771 A flaw was found in the way mailx handled the parsing of email addresses...

e107 CMS 2.1.4 - Cross-Site Request Forgery

...

[SECURITY] Fedora 25 Update: kernel-4.10.8-200.fc25

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.10.8-100.fc24

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.9.17-100.fc24

The kernel meta package...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3234-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3234-1 advisory. Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access...

USN-3234-1: Linux kernel vulnerabilities

Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access could use this to specially craft an ext4 image that causes a denial of service system crash. CVE-2016-10208 It was discovered that the Linux...

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

WordPress 4.5.3 Audio Playlist Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 20...

MGASA-2017-0065 Updated kernel-linus fixes security vulnerabilities

This kernel-linus update is based on upstream 4.4.50 and fixes at least the following security issues: The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service system hang by leveraging access t...

[SECURITY] Fedora 24 Update: kernel-4.9.10-100.fc24

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.9.10-200.fc25

The kernel meta package...

Yelp: Research papers on yelp are getting indexed by google bots.

While playing around to access some private information on yelp.com i was able to get access to research papers on yelp which are not supposed disclose publically. By framing a google dork i got access to most of your documents. Google Dork: site:starbucks.com ext:doc | ext:docx | ext:odt | ext:p...

New Relic: Directory listing - i am able to download all php_agent archive

While playing around to access some private information on newrelic.com i was able to get access to critical files which are not supposed disclose publically. i am able to download all archived files. Google Dork:site:newrelic.com intitle:index.of Real Proof:...

Pornhub: Reflected XSS in Meta Tag

The researcher reported a reflected XSS bug in a meta tag in the search bar. XSS found with @the-useless-one! All details here: https://the-useless-one.github.io/posts/2017/03/28/meet-beautiful-xss-in-your-area-a-youporn-bug-bounty-sfw/...

DEBIAN-CVE-2016-10208

The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...

UBUNTU-CVE-2016-10208

The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...