Microsoft Internet Explorer CSS Quotes Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

TinyRise 最新版注射获取敏感信息

简要描述： TinyRise 最新版注射获取敏感信息 详细说明： 主要问题出在filterclass.php: public static function text$str $config = HTMLPurifierConfig::createDefault; $cachedir=Tiny::getPath'cache'."/htmlpurifier/"; if!fileexists$cachedir File::mkdir$cachedir; $config = HTMLPurifierConfig::createDefault; //配置 缓存目录...

CVE-2014-7581

The CVE-2014-7581 entry concerns The Quotes of Travis Barker (com.celebrity_quotes.travisbarker) Android app, version 0.0.1, which does not verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a cr...

CVE-2014-7569

CVE-2014-7569 affects the Android app “Best Greatness Quotes” (1.0). It does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via a crafted certificate. The issue is tied to the app’s TLS certificate validation logic (...

CVE-2014-7581

The Quotes of Travis Barker aka com.celebrityquotes.travisbarker application 0.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6988

The Quotes in Images aka pt.lumberapps.imagensfrases application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6988

CVE-2014-6988 concerns the Android application Quotes in Images (pt.lumberapps.imagensfrases) version 3.7.5, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof HTTPS servers and obtain sensitive information via a crafted certifica...

AZL-7331 CVE-2014-3618 affecting package procmail for versions less than 3.22-53

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

AZL-6802 CVE-2014-3618 affecting package procmail for versions less than 3.22-53

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

DEBIAN-CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

Heap overflow

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

UBUNTU-CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

齐博cmsV7整站系统sql注入

简要描述： 应该逻辑有点小错误? 详细说明： http://down.qibosoft.com/down.php?v=v7 刚下载来测试的 发现点问题。 function AddS$array foreach$array as $key=$value if!isarray$value @eregi"'\"&+",$key && die'ERROR KEY!'; $value=strreplace"&x","& x",$value; //过滤一些不安全字符 $value=pregreplace"/eval/i","eva l",$value; //过滤不安全函数...

PHP Director <= 0.21 (sql into outfile) eval() Injection Exploit

No description provided by source. include stdio.h include stdlib.h include string.h include netinet/in.h include arpa/inet.h include netdb.h / Dork Powered by PHP Director 0.2 | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...

OvBB 0.16a - Multiple Local File Inclusion Vulnerabilities

No description provided by source. OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = ::...