CVE-2017-15601: Improper Restriction of Operations within the Bounds of a Memory Buffer

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...

PT-2017-14126

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.4 Description The issue is caused by an integer signedness error for the chunk size in the EXTRACTOR nsfe extract method function, located in plugins/nsfe extractor.c. This error can lead to an infinite loop when a...

Microsoft Windows 10 Version 1511 Unsupported Version Detection (deprecated)

This plugin has been replaced by Windows Security-End-of-Life plugins. C Tenable Network Security, Inc. @DEPRECATED@ Deprecated on 2024 Mar 14. Replaced by Windows SEoL plugins. include"compat.inc"; if description scriptid103877; scriptversion"1.10";...

PT-2017-14125

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.4 Description The issue is related to a heap-based buffer overflow in the EXTRACTOR png extract method function, specifically in the processing of TXt and the use of stndup. Recommendations For GNU Libextractor versi...

PT-2017-14124

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.4 Description The issue is related to a NULL Pointer Dereference in the EXTRACTOR nsf extract method function, located in the plugins/nsf extractor.c file. Recommendations For GNU Libextractor version 1.4, consider...

Flyspray Stored Cross-Site Scripting Vulnerability

Flyspray is a lightweight, web-based, bug tracking system written in PHP to assist in software development and project management. Flyspray suffers from a stored cross-site scripting vulnerability, which allows an authenticated user to gain administrator privileges by injecting JavaScript via the...

CVE-2017-15189

In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements...

CVE-2017-15214

Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users including unauthenticated users, via the name, title, or id parameter to...

PT-2017-13878

Name of the Vulnerable Software and Affected Versions Libmp3splt version 0.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted file containing invalid input. This is due to the vorbis block clear function from t...

Vulners NASL Plugin Feeds for OpenVAS 9

As I already wrote earlier, you can easily add third party nasl plugins to OpenVAS. So, my friends from Vulners.com realised generation of NASL plugins for OpenVAS using own security content. I've tested it for scanning CentOS 7 host. And it works = Let's see the whole process. I assume that we...

CVE-2017-1000102

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...

PT-2017-10807

Name of the Vulnerable Software and Affected Versions Static Analysis Utilities based plugins affected versions not specified Description The Details view of some Static Analysis Utilities based plugins was vulnerable to a persisted cross-site scripting issue. Malicious users who could influence...

3 vulnerable WordPress plugins affecting 21,000 websites

By Waqas 21,000 Websites Affected after Exploiting of Three WordPress Plugins Zero-day This is a post from HackRead.com Read the original post: 3 vulnerable WordPress plugins affecting 21,000 websites...

FreeBSD : ansible -- information disclosure flaw (478d4102-2319-4026-b3b2-a57c48f159ac)

ansible developers report : Ansible versions 2.2.3 and earlier are vulnerable to an information disclosure flaw due to the interaction of call back plugins and the nolog directive where the information may not be sanitized properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Sql injection

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb-prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks...

CVE-2017-14723

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb-prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks...

WordPress: Reflected Swf XSS In ( plugins.svn.wordpress.org )

Hello , I have found XSS in flash File video-js.swf in plugins.svn.wordpress.org and Content Spoofing Vulnerability in moxieplayer.swf POC https://plugins.svn.wordpress.org/1player/tags/1.3/players/video-js/video-js.swf?readyFunction=alert%27Hello%27 F222664...

WordPress 2.3.0-4.7.4 - Authenticated SQL injection

Description Due bad solution of the database abstraction library WordPress exposes itself towards SQL Injection and validation bypass. Beside WordPress itself this issue have huge impact towards complete WP ecosystem. Up to WordPress 4.8.1 is vulnerable, but this time attack is dependent from...

The vulnerability in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin allows a malicious user to execute arbitrary commands on the operating system.

The vulnerability in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating...

Authentication flaw

In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access...