PT-2018-2983

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.14.x through 4.18.x before 4.18.13 Description The issue is caused by faulty computation of numeric bounds in the BPF verifier, which permits out-of-bounds memory accesses. This is due to the mishandling of 32-bit right...

acesso.ivv.min-agricultura.pt XSS vulnerability

Open Bug Bounty ID: OBB-654863 Description| Value ---|--- Affected Website:| acesso.ivv.min-agricultura.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

min-funabashi.jp XSS vulnerability

Open Bug Bounty ID: OBB-599999 Description| Value ---|--- Affected Website:| min-funabashi.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

min-com.com XSS vulnerability

Vulnerable URL: https://www.min-com.com/brockville-real-estate-listings.php?command=view=13" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10898401 VIP website status:| No Coordinated Disclosure Timeline:...

PT-2018-9696

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue might allow local users to cause a denial of service. This is related to the kill something info function in kernel/signal.c, which can be affected when an unspecified architecture an...

Heap-buffer-overflow in find_minlength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4881488118022144 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002c33 Crash State:...

min-vinkaelder.dk XSS vulnerability

Open Bug Bounty ID: OBB-182484 Description| Value ---|--- Affected Website:| min-vinkaelder.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

USN-3045-1 php5, php7.0 vulnerabilities

It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-4116 ...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the splptrheapinsert function ext/spl/splheap.c in the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by invoking the faulty operation of SplMinHeap::compare...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures

The vulnerability of the LISTPOISON function include/linux/poison.h in the kernel is related to errors in handling the mmapminaddr variable. Exploiting this vulnerability allows a remote attacker to bypass security measures by calling an uninitialized list of entries...

DEBIAN-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

UBUNTU-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

Exploit for Improper Input Validation in Linux Linux_Kernel

Exploit for CVE-2017-5123 Step Complile kernel with null...

PT-2015-7842

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to multiple integer overflows in the get time t max and get time t min functions in archive read support format mtree.c. This can be triggered by a crafted mtree file, leading...

Information Disclosure and Arbitrary File Upload Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is a comprehensive enterprise-level data integration application system developed by UFIDA Software Co. The UFIDA NC-IUFO Reporting System suffers from an information disclosure and arbitrary file upload vulnerability, which allows an attacker to exploit this...

PT-2016-1597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3 Description The issue is related to errors in handling the mmap min addr variable in the LIST POISON function of the Linux kernel. This can allow a remote attacker to bypass a protection mechanism by triggeri...

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/passwd - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...

CVE-2014-7062

The CVE-2014-7062 entry concerns the Association Min Ajlik (com.association.min.ajlik) Android app version 1.0, which does not verify X.509 certificates when establishing SSL connections. This allows a man-in-the-middle attacker to spoof SSL servers and potentially exfiltrate sensitive informatio...

CVE-2014-7062: Undefined Security Weakness

The Association Min Ajlik aka com.association.min.ajlik application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...