Qemu: memory exhaustion through framebuffer update request message in VNC server

VNC server implementation in Quick Emulator QEMU was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A...

quick-jobs.de XSS vulnerability

Open Bug Bounty ID: OBB-692072 Description| Value ---|--- Affected Website:| quick-jobs.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Quick Count 'txtInstID' Parameter SQL Injection Vulnerability

Quickcount is a way to measure audience response on your own web host without having to prepare special slides or other settings. A SQL injection vulnerability exists in the 'txtInstID' parameter of Quick Count version 2.0, which can be exploited by an attacker to gain access to sensitive databas...

Quick Count 2.0 - txtInstID SQL Injection

Quick Count 2.0 - txtInstID SQL Injection Exploit Title: Quick Count 2.0 - 'txtInstID' SQL Injection Dork: N/A Date: 2018-10-25 Exploit Author: Ihsan Sencan Vendor Homepage: https://quickcount.sourceforge.io/ Software Link: https://sourceforge.net/projects/quickcount/files/latest/download Version...

Quick Count 2.0 - txtInstID SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Quick Count 2.0 - 'txtInstID' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://quickcount.sourceforge.io/ Software Link: https://sourceforge.net/projects/quickcount/files/latest/download Version: 2.0 Category:...

Quick Count 2.0 - 'txtInstID' SQL Injection

Exploit Title: Quick Count 2.0 - 'txtInstID' SQL Injection Dork: N/A Date: 2018-10-25 Exploit Author: Ihsan Sencan Vendor Homepage: https://quickcount.sourceforge.io/ Software Link: https://sourceforge.net/projects/quickcount/files/latest/download Version: 2.0 Category: Webapps Tested on:...

QEMU integer overflow vulnerability (CNVD-2018-21624)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An integer overflow vulnerability exists in QEMU. An attacker could exploit this vulnerability to cause memory corruption...

WordPress Quick Chat SQL Injection

SQL Injection vulnerability in WordPress Quick Chat plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Apple iOS Quick Look Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Quick Look is one of the components used to view common resource files. An information disclosure vulnerability exists in the Quick Look component in Apple iOS versions prior to 12.0.1. A local attacker can exploit the...

QEMU 'rtl8139_do_receive' function buffer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A buffer overflow vulnerability exists in the 'rtl8139doreceive' function of the hw/net/rtl8139.c file in QEMU, which stems from the program...

About the security content of iOS 12.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of iOS 12.0.1

About the security content of iOS 12.0.1 This document describes the security content of iOS 12.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

XenMobile: Supported File Formats with Quick Edit

Question and Answers Which all file formats are supported within Quick Edit? QuickEdit supports the following types of files: Microsoft Word – .doc and .docx Microsoft Excel – .xls and .xlsx Microsoft PowerPoint – .ppt and .pptx PDF TXT and RTF iOS only CSV iOS only GIF, JPEG, BMP, and PNG These...

en.krankenkassenportal.ch XSS vulnerability

Open Bug Bounty ID: OBB-678568 Description| Value ---|--- Affected Website:| en.krankenkassenportal.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Electron WebPreferences - Remote Code Execution Exploit

Exploit for multiple platform in category remote exploits CVE-2018-15685 - Electron WebPreferences Remote Code Execution This is a minimal Electron application with a POC for CVE-2018-15685. A remote code execution vulnerability has been discovered affecting apps with the ability to open nested...

Memory Corruption Vulnerability in Quick Clip's Handling of TGA Format Images

Quick Clip is a video editing tool from 360. FastClip has a memory corruption vulnerability in the handling of TGA format images, which can be exploited by attackers to cause the program to crash by constructing a malformed TGA format file...

TP-Link Wireless N Router WR840N - Denial of Service (PoC)

TP-Link Wireless N Router WR840N - Denial of Service PoC Exploit Title:- TP-Link Wireless N Router WR840N - Denial of Service PoC Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version:...

TP-Link Wireless N Router WR840N - Denial of Service (PoC)

Exploit Title:- TP-Link Wireless N Router WR840N - Denial of Service PoC Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Link Wireless N Router WR840N Category: Hardware Exploit...

quick-toy.fr XSS vulnerability

Open Bug Bounty ID: OBB-659501 Description| Value ---|--- Affected Website:| quick-toy.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Quick Heal Anti-Virus Pro DLL Hijacking Vulnerability

Quick Heal Anti-Virus Pro is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...