143 matches found
Input validation
Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...
Fedora Update for sphinx FEDORA-2019-1f604fd2f2
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Nextcloud: [Reflected XSS] In Request URL
In index.php file on 1765 we can see XSS: " Because NextCloud allow links like: '/index.php/ANYCONTENT' If we will do request like: POST /updater/index.php/h"alert1; HTTP/1.1 Host: vulns.local Content-Type: application/x-www-form-urlencoded Content-Length: 33 updater-secret-input=OURSECRET We wil...
[SECURITY] Fedora 29 Update: opencc-1.0.5-3.fc29
OpenCC is a library for converting characters and phrases between Traditional Chinese and Simplified Chinese...
native-phrase-blog.com XSS vulnerability
Open Bug Bounty ID: OBB-691828 Description| Value ---|--- Affected Website:| native-phrase-blog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
[SECURITY] Fedora 27 Update: electrum-3.0.5-1.fc27
Electrum is an easy to use Bitcoin client. It protects you from losing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it does not...
reg.mutantbox.com XSS vulnerability
Vulnerable URL: http://reg.mutantbox.com/liberators/newreg/?tag=GG-GB-S|Onlinegame-Phrase...
Phrase Wheel - Dangerous filesystem permissions, Hardcoded secrets, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Phrase Wheel published at the 'play' market has multiple vulnerabilities...
OpenSSL - Alternative Chains Certificate Forgery
OpenSSL - Alternative Chains Certificate Forgery !/usr/bin/env ruby encoding: ASCII-8BIT By Ramon de C Valle. This work is dedicated to the public domain. require 'openssl' require 'optparse' require 'socket' Version = 0, 0, 1 Release = nil class String def hexdumpstream=$stdout 0.stepbytesize - ...
Updated perl-Email-Address packages fix security vulnerabilities
Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...
SUSE-RU-2015:0591-1 Recommended update for apache2-mod_nss
This update brings several improvements to apache2-modnss. More TLS 1.2 ciphers have been added, including AES-GCM and Camelia ciphers. These can be selected by their tags: o rsaaes128sha256 o rsaaes128gcmsha o rsaaes256sha256 o rsacamellia128sha o rsacamellia256sha o ecdhecdsaaes128gcmsha o...
UPC Ireland Cisco EPC 2425 Router Horizon Box - WPA-PSK Handshake Information
UPC Ireland Cisco EPC 2425 Router Horizon Box - WPA-PSK Handshake Information Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box Google Dork: Date: 11/12/2013 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf Version: Category:...
Facebook My Phrase Box SQL Injection
Title: ====== Facebook My Phrase Box - SQL Injection Vulnerability Date: ===== 2011-10-16 VL-ID: ===== 288 Introduction: ============= The application is currently included and viewable by all facebook users. The service is an external 3rd party application sponsored by the My Phrase Box. Copy fr...
Facebook My Phrase Box - SQL Injection Vulnerability
Document Title: =============== Facebook My Phrase Box - SQL Injection Vulnerability Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 288 Product & Service Introduction: =============================== The application is currently...
Strong passwords
Here’s a nice tip instead. Think of a phrase that is most likely unique and easy to remember, for example, “uniqueeasytorememberphrase”. Be sure no dictionaries used in brute-force attacks include such a password. Also, after using it for several days you will start typing it faster than the blin...
Sphider Script 1.3.x Command Execution
======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...
Buffer overflow
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
Apple QuickTime RTSP Response message Reason-Phrase buffer overflow vulnerability
Overview Apple QuickTime contains a buffer overflow vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition and possibly execute arbitrary code. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. Appl...
