9343 matches found
SQL Injection
Overview Versions 2.0.0-rc-7 and earlier of sequelize are affected by a SQL injection vulnerability when user input is passed into the order parameter. Proof of Concept javascript Test.findAndCountAll where: id :1 , order : 'id', 'UNTRUSTED USER INPUT' Recommendation Update to version 2.0.0-rc8 o...
Threat Outbreak Alert RuleID18697: Email Messages Distributing Malicious Software on October 15, 2015
Medium Alert ID: 41535 First Published: 2015 October 15 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18697 may contain the following files: Name |...
Oracle: Security Advisory (ELSA-2007-0964)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
nodejs: denial of service
A vulnerability has been discovered in the HTTP pipeline handling that is leading to an application crash. This problem is caused by out-of-order responses being sent to the client within a single pipelined connection...
PT-2015-6831 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.2.3 Description: The issue is related to an incorrect sequence of protocol-initialization steps in the sctp init function, which can cause a denial of service, resulting in a panic or memory corruption. This c...
Shopify: customers password hash leak!!!!
An endpoint in the Draft Order feature would return a serialized version of the Customer that contained the account password hashed and salted as well as the last password reset token when available...
How Amazon Employee bought 'Google.com' Domain for Only $12 from Google
Difficult to believe this, as we hardly come across such news. But trust me, a person managed to buy no ordinary .com domain, but — Google.com and that too for one whole minute. Sanmay Ved, an ex-Google employee and current-Amazon employee, experienced something of a shock when he found that the...
Integer overflow
The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM, which allows remote attackers to execute arbitrary code or cause a denial of service integer...
SUSE-SU-2015:1776-1 Security update for haproxy
haxproy was updated to backport various security fixes and related patches bsc937202 bsc937042 CVE-2015-3281 + BUG/MAJOR: buffers: make the bufferslowrealign function respect output data + BUG/MINOR: ssl: fix smpfetchsslfcsessionid + MEDIUM: ssl: replace standards DH groups with custom ones +...
Floating Social Bar 1.1.5 XSS
Everyone can access saveorder. File: floating-social-bar\class-floating-social-bar.php addaction 'wpajaxfsbsaveorder', array $this, 'saveorder' ; addaction 'wpajaxnoprivfsbsaveorder', array $this, 'saveorder' ; $REQUEST'items' is not escaped. File: floating-social-bar\class-floating-social-bar.ph...
F5 BIG-IP - PHP vulnerability CVE-2015-4024
The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...
Threat Outbreak Alert RuleID17943: Email Messages Distributing Malicious Software on September 13, 2015
Medium Alert ID: 40985 First Published: 2015 September 14 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17943 and RuleID17943KVR may contain the...
Threat Outbreak Alert RuleID17838: Email Messages Distributing Malicious Software on August 2, 2016
Medium Alert ID: 40911 First Published: 2015 September 9 16:05 GMT Last Updated: 2016 August 3 12:52 GMT Version: 27 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17838...
Threat Outbreak Alert RuleID17826: Email Messages Distributing Malicious Software on September 8, 2015
Medium Alert ID: 40886 First Published: 2015 September 8 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17826 may contain the following files: Name |...
U.S. Prepping Sanctions Against China Over Cyberattacks
The U.S. government is purportedly readying economic sanctions against China and is prepared to call out several Chinese companies and individuals for committing cyber espionage. It’s not exactly clear when the Obama administration will levy the sanctions, but according to an article from Sunday’...
Threat Outbreak Alert RuleID17564: Email Messages Distributing Malicious Software on August 25, 2015
Medium Alert ID: 40661 First Published: 2015 August 25 19:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17564 may contain the following files: Name |...
Vulnerability in VirtueMart for Joomla
Hello 3APA3A! This is Brute Force vulnerability in VirtueMart for Joomla. Which is at order details page. ------------------------- Affected products: ------------------------- Vulnerable are VirtueMart 3.0.9 for Joomla and previous versions. ---------- Details: ---------- Brute Force WASC-11:...
cmstop媒体云sql注入漏洞(1)-order by 注入技巧
简要描述： 今天无聊就多看了一会儿媒体云的产品，order by 后面的注入技巧 详细说明： 其他说明见： WooYun: cmstop媒体云SQL注入漏洞 同样的cmstop 媒体云的注入 注册账号后，在选择链接分类的时候，会发生如下链接 http://site.cmstop.cn/link/index/list?type=1&offset=0&limit=50&=1440172313381&sort=desc&category=2 但是其中的sort参数过滤不严格，导致了一个order by后面的mysql注入...
Google Unveils Smart, New OnHub Wi-Fi Router
Don't stare at the screen for too long for the buffering to end, Google has a solution! It seems like Google is buckling up to carve out a niche in the market of wireless smart network devices. Just few days after Google made itself a subsidiary and a separate venture under Alphabet Inc, it...
