Debian DSA-4645-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-20503 Natalie Silvanovich discovered an out-of-bounds read issue in the usrsctp library. - CVE-2020-6422 David Manouchehri discovered a use-after-free issue in the WebGL implementation. - CVE-2020-6424 Sergei...

mo-hawaii.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3637 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting mo-hawaii.com website and its users. Following coordinate...

SQL Injection Vulnerability in the i*** Parameters of Thunderwind Movie CMS Mo***.php Page

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Mo.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

CenturyStar mo*** server in heap overflow vulnerability

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. It is a real-time human-machine interface utility program generator, which consists of CSMaker development system and CSViewer operation system. A heap overflow vulnerability...

SQL injection vulnerability in the front-end mo***_pa***_mo***.asp file of the Environmental Protection Era Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System" is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and accounts payable, as well as company's bookkeeping and other related financial...

SQL Injection Vulnerability in the front-end mo***_mo***.asp file of Eco-Era's online enterprise bookkeeping management system

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the frontend mo***_sh***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

Command execution vulnerability in Zendo Enterprise mo***.php file

Zendo Enterprise Edition is open source project management software. A command execution vulnerability exists in the Zendo Enterprise Edition mo.php file. An attacker can exploit the vulnerability to write arbitrary files to gain server privileges...

mo-hawaii.com XSS vulnerability

Open Bug Bounty ID: OBB-666853 Description| Value ---|--- Affected Website:| mo-hawaii.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mo-hawaii.com XSS vulnerability

Open Bug Bounty ID: OBB-657415 Description| Value ---|--- Affected Website:| mo-hawaii.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mo-info.de XSS vulnerability

Open Bug Bounty ID: OBB-644942 Description| Value ---|--- Affected Website:| mo-info.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 27 Update: php-phpmyadmin-motranslator-4.0-1.fc27

Translation API for PHP using Gettext MO files. Features All strings are stored in memory for fast lookup Fast loading of MO files Low level API for reading MO files Emulation of Gettext API No use of eval for plural equation Limitations Not suitable for huge MO files which you don't want to stor...

realvirtualadvertising.com XSS vulnerability

Open Bug Bounty ID: OBB-450194 Description| Value ---|--- Affected Website:| realvirtualadvertising.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Moderate: Red Hat Security Advisory: Red Hat JBoss BRMS 6.4.7 security update

An update is now available for Red Hat JBoss BRMS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Moderate: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.4.7 security update

An update is now available for Red Hat JBoss BPM Suite. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

[SECURITY] Fedora 25 Update: php-php-gettext-1.0.12-1.fc25

This library provides PHP functions to read MO files even when gettext is not compiled in or when appropriate locale is not present on the system...

[SECURITY] Fedora 24 Update: php-php-gettext-1.0.12-1.fc24

This library provides PHP functions to read MO files even when gettext is not compiled in or when appropriate locale is not present on the system...

[SECURITY] Fedora 23 Update: php-php-gettext-1.0.12-1.fc23

This library provides PHP functions to read MO files even when gettext is not compiled in or when appropriate locale is not present on the system...

PHP gettext 1.0.12 Code Execution

CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...

PHP gettext 1.0.12 - (gettext.php) Unauthenticated Code Execution

Exploit for php platform in category web applications CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian,...