padi.co.jp Cross Site Scripting vulnerability OBB-3403245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PlayStation: Remote kernel heap overflow

Summary The PlayStation has a kernel PPPoE driver, that originates from NetBSD. This driver has a kernel heap overflow vulnerability, that an attacker can remotely trigger over the LAN, with the ability to control both the contents that are overflown and their sizes. Technical Details PPPoE...

padi.com XSS vulnerability

Vulnerable URL: https://www.padi.com/Scuba-Diving/search.aspx?q=";;confirm'XSSPOSED'; function Results $".search-excerpt".eachfunction var term = "x Details: Description| Value ---|--- Patched:| Yes, at 28.09.2016 Latest check for patch:| 28.09.2016 10:00 GMT Vulnerability type:| XSS Vulnerabilit...

Multiple MacOS X security vulnerabilities

Apple Type Services server font processing buffer overflow. ftpd may allow arbitrary users to determine account name validity. CFNetwork may allow arbitrary FTP commands to be executed via a crafted FTP URI. Security Framework Secure Transport may not negotiate the best cipher available. PPP driv...

[Full-disclosure] [MU-200611-01] Pre-Authentication Vulnerability in Mac OSX kernel PPP

driver -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pre-Authentication Vulnerability in Mac OSX kernel PPP driver MU-200611-01 November 28, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: Mac OS X v10.3.9 Mac OS X Server v10.3.9 Mac OS X v10.4.8 Mac OS X Server v10.4.8...

Apple Mac OS X PPP driver fails to properly validate PADI packets

Overview The Apple Mac OS X PPP driver fails to properly handle PPPoE Active Discovery Initiation PADI packets. This vulnerability may allow a remote attacker to execute arbitrary code with system privileges. Description The Apple Mac OS X PPP driver fails to properly handle PADI packets allowing...