2516 matches found
CVE-2018-11358
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...
CVE-2018-11358
CVE-2018-11358 affects Wireshark dissector Q.931 across multiple branches (2.6.0, 2.4.0–2.4.6, 2.2.0–2.2.14) with a use-after-free in packet-q931.c that could crash on malformed input. The vulnerability was addressed by preventing the cleanup/use-after-free sequence. In practice, security advisor...
CVE-2018-11358
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...
CVE-2018-11358
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...
CVE-2018-11358: Use After Free
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...
KLA11255 Multiple vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in LDSS dissector can be exploited remotely via malformed packet trace file to...
q-i.com.pt XSS vulnerability
Open Bug Bounty ID: OBB-611701 Description| Value ---|--- Affected Website:| q-i.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
q-park.no XSS vulnerability
Open Bug Bounty ID: OBB-611007 Description| Value ---|--- Affected Website:| q-park.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
guide-israel.ru XSS vulnerability
Open Bug Bounty ID: OBB-603933 Description| Value ---|--- Affected Website:| guide-israel.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2018-10516
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.14 Wireshark versions 2.4.0 through 2.4.6 Wireshark version 2.6.0 Description The issue is related to the Q.931 dissector, which could crash due to a use-after-free error after processing a malformed packet...
q-lympics.de XSS vulnerability
Open Bug Bounty ID: OBB-595889 Description| Value ---|--- Affected Website:| q-lympics.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ask2 Q&A system front user.php file exists arbitrary user password change vulnerability
ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...
q-park.nl XSS vulnerability
Open Bug Bounty ID: OBB-571414 Description| Value ---|--- Affected Website:| q-park.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Grab: [growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine's microsite
Hi, An encoded injection in the q parameter on my.html can be used to reflect JavaScript in the growth.grab.com context. This microsite creates a "Grab's Valentine" card for a driver over the past year, and carries its data in Base64 format. Proof of concept Please visit the following URL, scroll...
Human Factor Podcast: Jenny Radcliffe and Chris Boyd
A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...
q-ry.nl XSS vulnerability
Open Bug Bounty ID: OBB-567754 Description| Value ---|--- Affected Website:| q-ry.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
singapore.job-q.com XSS vulnerability
Open Bug Bounty ID: OBB-547918 Description| Value ---|--- Affected Website:| singapore.job-q.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-5977: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...
PT-2018-17263
Name of the Vulnerable Software and Affected Versions: Affiligator Affiliate Webshop Management System version 2.1.0 Description: A SQL Injection issue exists in the Affiligator Affiliate Webshop Management System. The issue can be exploited via the /search/?q=&price type=range&price= API endpoin...
PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability
PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...