FortiOS DoS on webUI through 'params' JSON parameter

An authenticated user may pass a specially crafted payload to the 'params' parameter of the JSON web API URLs with /json , which can cause the web user interface to be temporarily unresponsive...

CVE-2017-9677

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msmcomprioctlshared, variable "ddp-paramslength" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, ra...

LAME lame_init_params function denial of service vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'lameinitparams' function in the lame.c file of the libmp3lame.a file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...

CVE-2017-8760

An issue was discovered on Accellion FTA devices before FTA912180. There is XSS in courier/1000@/index.html with the authparams parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads,...

PT-2017-18510

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered that allows for cross-site scripting XSS in the courier/1000@/index.html endpoint with the auth params parameter. The device attempts to mitigate specific XSS...

PT-2017-18531

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered that allows for a CRLF attack vector through the auth params in the "home/seos/courier/login.html" endpoint. Recommendations For versions prior to FTA 9 12 180,...

omniauth leaks authenticity token in callback params

In strategy.rb in OmniAuth before 1.3.2, the authenticitytoken value is improperly protected because POST in addition to GET parameters are stored in the session and become available in the environment of the callback phase...

Fedora 24 : ghostscript (2016-3dad5dfd03)

This update fixes a rare ocasion where ghostscript would fail when displaying .ps files. More info can be found here. ---- This is a security update for these CVEs : - CVE-2016-8602 - check for sufficient params in .sethalftone5 - CVE-2016-7977 - .libfile does not honor -dSAFER This CVE is now...

PT-2016-6973

Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a heap-based buffer overflow in the pdf load mesh params function, which can be triggered by a large decode array. This can cause a denial of service crash or potentiall...

PT-2016-3472 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.6-rc6-next-20120917 Description: The issue is related to an integer overflow in the snd compr allocate buffer function in the ALSA subsystem. This can be exploited by local users via a crafted SNDRV COMPRESS S...

Linux kernel ALSA subsystem denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'sndcompresscheckinput' function in the sound/core/compressoffload.c file in the ALSA subsystem of the Linux kernel prior to version 3.1...

DEBIAN-CVE-2014-9904

The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service insufficient memory allocation or possibly have unspecified other impact...

PT-2016-6029

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 Description The issue is related to the snd timer user params function in the sound/core/timer.c file of the Linux kernel. This function does not properly initialize a certain data structure, allowing local...

CVE-2015-4027: Undefined Security Weakness

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner WVS before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan...

Rack 'normalize_params()' function denial of service vulnerability

Rack is a Ruby Web server interface that unifies APIs for Web servers, Web frameworks, and middleware, and supports calling them using a single method. A security vulnerability in the Rack 'normalizeparams' function allows remote attackers to conduct denial-of-service attacks that can be exploite...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the sblim-cmpi-params-test-1.2.6 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

mcms最新版SQL注入一枚

简要描述： mcms最新版SQL注入一枚 详细说明： 掌易科技的程序员反应相当快啊，确认漏洞当天就修复以后出新版本了，前面在wooyun提的几个漏洞新版的mcms做了相应的处理，发布了新版v3.1.3.enterprise，再来研究研究。 注入一枚：/app/public/user.php?m=recharge&ajax=1 POST中有个参数params存在注入。 function mrecharge global $dbm; checklevel'C0503',AJAX; $fields = array;...

CVE-2015-2839

The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting XSS attacks via the filename JSON member in params/xenhotfix/0 to nitro/v1/config/xenhotfix...

PT-2015-5924

Name of the Vulnerable Software and Affected Versions Citrix NetScaler versions prior to 10.5 build 52.3nc Description The issue allows remote attackers to conduct cross-site scripting XSS attacks. This is achieved by exploiting the Nitro API, which returns an error message with an incorrect...

FancyFon Software FAMOC SQL Injection Vulnerability

FancyFon Software FAMOC is a mobile device lifecycle management solution from FancyFon Software Ireland. The solution enables centralized remote management of smartphones using various operating systems over the Internet. A SQL injection vulnerability exists in FancyFon Software FAMOC versions...