Libming Denial of Service Vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A denial of service vulnerability exists in the 'readString' function in the files util/old/read.c and util/read.c in version 0.4.8 of libming...

newellsoldboys.com.ar XSS vulnerability

Vulnerable URL: http://www.newellsoldboys.com.ar/page/busquedas Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1026475 VIP website status:| No Check newellsoldboys.com.ar SSL...

PT-2017-18523

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue is related to the readString function in util/read.c and util/old/read.c, which can be exploited by remote attackers to cause a denial of service. This happens when a large file is mishandled by tool...

CVE-2017-8782: Integer Overflow or Wraparound

The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error...

CVE-2016-4435

An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a...

PT-2017-15193 · Codecanyon · Yop Poll

Name of the Vulnerable Software and Affected Versions: YOP Poll versions prior to 5.8.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations: For versions prior to 5.8.1, update to version 5.8.1 or later to resolve the issue...

Arbitrary User Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a free translation and learning software from Kingsoft. Kingsoft wordmaster android app there is any user password reset vulnerability, the vulnerability arises from the change of password did not increase the verification of the old password due to the attacker can take...

CVE-2016-9462

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying whether a user has only read-only access to a share. Thus a user with read-only access was able to...

SambaCry, the Seven Year Old Samba Vulnerability, is the Next Big Threat (for now)

As Samba is used as part of many organizations storage systems, we will discuss the impact of the vulnerability on organizations and home users...

Dashbuilder: insecure handling of CSRF token

It has been reported that CSRF tokens are not properly handled in JBoss BPM suite dashbuilder. Old tokens generated during an active session can be used to bypass CSRF protection. In addition, the tokens are sent in query string so they can be exposed through the browser's history, referrers, web...

Eaton xComfort Ethernet Communication Interface Unauthorized Access Vulnerability

Eaton xComfort is a smart home solution from Eaton Corporation of America. The solution includes a wireless home automation system that provides the home with features such as security and energy management.Ethernet Communication Interface ECI is one of the Ethernet connection ports. A security...

Bull/IBM AIX Clusterwatch/Watchware - Multiple Vulnerabilities

Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we have found three vulnerabilities in it: Trivial admin...

Phabricator: Restricted file access when it exists in old versions of task or wiki document

mongoose Hey! I think there is strange access rules for restricted file. Steps to reproduce: 1. Load by User1 file and set it access level "No one" file Id for example 12 2. Make wiki with text F12 by User1 3. Edit new wiki page change all text or delete by User1 4. Try to access file from User2:...

PT-2017-7513

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.6.18 MyBB versions 1.8.x prior to 1.8.6 MyBB Merge System versions prior to 1.8.6 Description A cross-site scripting XSS issue might allow remote attackers to inject arbitrary web script or HTML via vectors related to...

CVE-2015-8976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade files."...

Updated 389-ds-base packages fix security vulnerability

The "attribute uniqueness" plugin did not properly NULL-terminate an array when building up its configuration if a so called 'old-style' configuration was being used. An attacker, authenticated, but possibly also unauthenticated, could possibly force the plugin to read beyond allocated memory and...

UBUNTU-CVE-2016-7986

The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...

Fedora 25 : gd (2017-bab5698540)

Version 2.2.4 - 2017-01-18 Security - gdImageCreate doesn't check for oversized images and as such is prone to DoS vulnerabilities. CVE-2016-9317 - double-free in gdImageWebPtr CVE-2016-6912 - potential unsigned underflow in gdinterpolation.c - DOS vulnerability in gdImageCreateFromGd2Ctx Fixed -...

Threat Outbreak Alert RuleID27288: Email Messages Distributing Malicious Software on January 19, 2017

Medium Alert ID: 52359 First Published: 2017 January 19 15:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27288 may contain the following files: Name |...

CVE-2016-1515

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-8789. Reason: This candidate is a reservation duplicate of CVE-2015-8789. Notes: All CVE users should reference CVE-2015-8789 instead of this candidate. All references and descriptions in this candidate have been removed to...