41 matches found
art-prints-on-demand.com Cross Site Scripting vulnerability OBB-2135969
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Amazon will pay you $10 for your palm prints. Should you be worried?
Retail giant Amazon recently offered to pay $10 USD for your palm prints. Would you offer them your hand? Many seem to home in and seethe over the price being too little for something as priceless and unique as their palm print, not realizing that when it does come to registering biometric data i...
The vulnerability of the Samba networking communication package lies in the reading of data beyond the allowed buffer size, allowing an attacker to cause a service failure.
The vulnerability of the Samba networking communication package is related to an error where “log level = 3” is displayed when the character conversion fails. This error results in a string from the user being printed. Exploiting this vulnerability can allow a remote attacker to cause service...
thompsonscreenprints.com Cross Site Scripting vulnerability OBB-1238599
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-8330
A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device, preventing subsequent print jobs until the printer is rebooted...
openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2018-1143) (Spectre)
This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues : These security issues were fixed : - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
Microsoft Windows: Turn off the Order Prints picture task
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winorderprintpictask.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Order Prints" picture task Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...
CVE-2018-10734
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a PrintPassword function call in certain circumstances...
prints.worc.ox.ac.uk XSS vulnerability
Vulnerable URL: http://prints.worc.ox.ac.uk/scripts/technique.asp?technique=1"...
Exploit for Code Injection in Samba
Basic Setup Install Samba version 4.5.9 https://download...
Hacking Fingerprint Readers with Master Prints
There's interesting research on using a set of "master" digital fingerprints to fool biometric readers. The work is theoretical at the moment, but they might be able to open about two-thirds of iPhones with these master prints. Definitely something to keep watching. Research paper behind a paywal...
OSINT Gathering Tool: Inquisitor
OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...
art.com XSS vulnerability
Vulnerable URL: https://www.art.com/gallery/id--c1837/vintage-art-prints.htm?ui="-prompt/XSSPOSED/-" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10734...
CVE-2014-5652
The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5652
The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5652
The CVE-2014-5652 entry concerns the Android app Kicksend Photo Prints (com.kicksend.android.print) version 1.0.7. The vulnerability is an SSL verification flaw where the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sens...
Fedora Update for feh FEDORA-2011-8750
Check for the Version of feh OpenVAS Vulnerability Test Fedora Update for feh FEDORA-2011-8750 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
[SECURITY] Fedora 15 Update: feh-1.14.1-1.fc15
feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slide-show or multiple windows. feh supports the creation of montages as index prints with many user-configurable...
DEBIAN-CVE-2009-2911
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...