SQL Injection Vulnerability in ClientCourse.asmx?op, E-learning Management System of Xinwei Software

E-learning management system is an online learning platform of Shenzhen Xinwei Software Co. A SQL injection vulnerability exists in the ClientCourse.asmx?op= page of the E-learning management system of Xinwei Software. An attacker can exploit the vulnerability to obtain sensitive information from...

PT-2016-3395

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.38 PHP versions 5.5.x prior to 5.5.22 PHP versions 5.6.x prior to 5.6.6 Description The issue is related to the sapi header op function in PHP, which supports deprecated line folding without considering browser...

UBUNTU-CVE-2015-8935

The sapiheaderop function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting XSS attacks against Internet Explorer by leveraging ...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3566)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3566 advisory. - net: add validation for the socket syscall protocol argument Hannes Frederic Sowa Orabug: 23267976 CVE-2015-8543 CVE-2015-8543 - ipv6: addrconf:...

CVE-2016-1264

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before...

PT-2016-1752

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X44-D55 Junos OS versions prior to 12.1X46-D40 Junos OS versions prior to 12.1X47-D25 Junos OS versions prior to 12.3R11 Junos OS versions prior to 12.3X48-D20 Junos OS versions prior to 12.3X50-D50 Junos OS...

Tap Play Anime Music-Fairy OP - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Tap Play Anime Music-Fairy OP published at the 'play' market has multiple vulnerabilities...

OP ePaper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application OP ePaper published at the 'play' market has multiple vulnerabilities...

DEBIAN-CVE-2015-8547

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...

Command injection

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...

UBUNTU-CVE-2015-8547

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...

CVE-2015-8547

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...

PT-2015-7802

Name of the Vulnerable Software and Affected Versions Xen versions 3.1.x through 4.3.x Description The issue allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service by consuming disk space. This can be achieved by leveraging a system with...

PT-2015-2908

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description The issue is related to the improper enforcement of limits on page order inputs for certain suboperations, including XENMEM increase reservation, XENMEM populate physmap, and XENMEM exchange, within t...

PT-2015-7801

Name of the Vulnerable Software and Affected Versions Xen versions 3.1.x through 4.3.x Description The issue allows local guest administrators to cause a denial of service by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN...

PT-2016-3925

Name of the Vulnerable Software and Affected Versions Quassel version 0.10.0 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending the "/op " command in a query. Recommendations For Quassel version 0.10.0,...

quassel -- remote denial of service

Pierre Schweitzer reports: Any client sending the command "/op " in a query will cause the Quassel core to crash...

UBUNTU-CVE-2015-7656

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

PT-2015-7684

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.6.x Description The issue allows local guests to cause a denial of service via a sequence of crafted hypercalls, specifically HYPERCALL xenoprof op or HYPERVISOR xenpmu op, which are not properly handled in the do...

PT-2014-1959

Name of the Vulnerable Software and Affected Versions Firebird versions 2.1.x through 2.1.6 Firebird versions 2.5.x through 2.5.2 Description The issue is related to the xdr status vector function and is caused by pointer dereference errors. It allows remote attackers to cause a denial of service...