4650 matches found
[SECURITY] Fedora 25 Update: perl-Image-Info-1.38-6.fc25
This Perl extension allows you to extract meta information from various types of image files...
HackerOne: Obtain the username & the uid of the one doing the S3 sync on Hackerone
Obtain the username & uid of hackerone.com S3 using GET, it's possible to obtain the username & uid of the one doing the S3 sync on Hackerone. Doing a GET on : http://hackerone.com Give the following header : content-security-policy = default-src 'none'; base-uri 'self'; block-all-mixed-content;...
[SECURITY] Fedora 25 Update: kernel-4.8.0-0.rc7.git0.1.fc25
The kernel meta package...
WP Front End Profile <= 0.2.1 - Privilege Escalation & Stored Cross-Site Scripting (XSS)
It is possible to modify a POST request to overwrite user meta including 'wpcapabilities' and 'wpuserlevel' which results in a privilege escalation vulnerability. User input is not sanitised or escaped on output resulting in a stored XSS vulnerability. Timeline: 2016-09-12: Vulnerability found...
Debian DSA-3652-1 : imagemagick - security update
This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...
Debian Security Advisory DSA 3652-1 (imagemagick - security update)
This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...
DSA-3652-1 imagemagick - security update
Bulletin has no description...
PT-2016-7365 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted file. This is due to a problem in the coders/meta.c file in ImageMagick. Recommendations:...
[SECURITY] Fedora 23 Update: kernel-4.6.7-200.fc23
The kernel meta package...
GitLab: XSS On meta tags in profile page
The profile page https://gitlab.com/u/ does not properly sanitize quotation marks, allowing for injection of attributes into the meta tags. This allows for redirection to phishing sites and other various nefarious things. I've managed to get my profile page to redirect to Bing by setting my bio t...
[SECURITY] Fedora 23 Update: kernel-4.6.6-200.fc23
The kernel meta package...
OLX: XSS on Meta Tag at https://m.olx.ph
Hi, There is improper validation at q parameter on https://m.olx.ph/ where it can be manipulated by an attacker to include his/her XSS payload to execute javascript code. As example: https://m.olx.ph/all-results?q=0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg"...
[SECURITY] Fedora 23 Update: kernel-4.6.5-200.fc23
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.6.5-300.fc24
The kernel meta package...
SecNews: Querying private posts and changing post meta
Summary --- Unauthenticated user can run arbitrary post queries and insert arbitrary numeric post meta via vulnerable /wp-content/themes/SecNews-NewCustom/functions/ajax.php file. I'm including two exploits in one report because the fix for both is the same, i.e. delete ajax.php. Run arbitrary po...
Torrentz.eu Shuts Down Forever! End of Biggest Torrent Search Engine
Over two weeks after the shutdown of Kickass Torrents and arrest of its admin in Poland, the world's biggest BitTorrent meta-search engine Torrentz.eu has apparently shut down its operation. The surprise shutdown of Torrentz marks the end of an era. Torrentz.eu was a free, fast and powerful...
OpenOffice Impress MetaActions Arbitrary Read/Write Vulnerability
OpenOffice.org is a cross-platform office software suite that runs on Windows, Linux, MacOS X X11 and Solaris. Openoffice has an out-of-bounds vulnerability in the handling of MetaActions. An attacker can trigger the vulnerability by causing out-of-bounds reads and writes with an Open Office...
Wireshark 'erf_meta_read_tag()' Remote Denial of Service Vulnerability
Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in Wireshark 'erfmetareadtag' allows remote attackers to exploit the vulnerability to crash the affected application, resulting in a denial-of-service attack...
CVE-2016-5135
WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...