rc-online.ru XSS vulnerability

Open Bug Bounty ID: OBB-488435 Description| Value ---|--- Affected Website:| rc-online.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

Netwide Assembler Heap Buffer Overflow Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A heap buffer overflow vulnerability exists in NASM version 2.14rc0. A remote attacker could exploit this vulnerability to cause a denial of service...

Linux kernel local denial of service vulnerability (CNVD-2017-33100)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'imonprobe' function in the drivers/media/rc/imon.c file in Linux kernel 4.13.11 and earlier versions. A local attacker c...

SQL Injection in sequelize

Versions 2.0.0-rc-7 and earlier of sequelize are affected by a SQL injection vulnerability when user input is passed into the order parameter. Proof of Concept javascript Test.findAndCountAll where: id :1 , order : 'id', 'UNTRUSTED USER INPUT' Recommendation Update to version 2.0.0-rc8 or later...

P3Scan Design Vulnerabilities

P3Scan is a proxy server for email that scans for worms, Trojans and other malicious emails. A security vulnerability exists in daemon in P3Scan 3.0rc1 and earlier versions, which stems from the creation of the p3scan.pid file after the program has downgraded an account to non-root privileges. A...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-1062) (BlueBorne)

The openSUSE Leap 42.2 kernel was updated to 4.4.87 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel BlueZ was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration...

JVN#16136413: Installers of Sony PaSoRi related software may insecurely load Dynamic Link Libraries

PaSoRi provided by Sony Corporation is contactless IC card reader/writer. Installers of PaSoRi driver and other related software for Windows contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with t...

VulnCheck KEV: CVE-2009-2532

Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka...

frsky-rc.com XSS vulnerability

Vulnerable URL: http://www.frsky-rc.com/product/product.php?cateid=12name=Receivers" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 186023 VIP website...

Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014

Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014 View products that this article applies to. Introduction This update is for the Microsoft .NET Framework to disable RC4 in Transpor...

rc-plus.net Open Redirect vulnerability

Vulnerable URL: http://www.rc-plus.net/board/index.php?thememode=mobile;redirect=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2055754 VIP...

Apple OS X Server ServerDocs Server Weak Password Vulnerability

Apple OS X Server is a set of Unix-based server operating software from Apple, Inc. ServerDocs Server is one of the service components. A weak password vulnerability exists in ServerDocs Server in Apple OS X Server versions prior to 5.2 that support the RC4 encryption algorithm, which can be...

CVE-2016-4754

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2016-4374

CVE-2016-4374 affects HPE Release Control (RC) 9.13, 9.20, and 9.21 prior to 9.21.0005 p4. The issue allows remote authenticated users to perform server-side request forgery (SSRF) and potentially disclose information or cause a DoS via unspecified vectors. No exploitation details are provided in...

rc-m.dk XSS vulnerability

Vulnerable URL: http://rc-m.dk/default.asp?id=b0193c4cf6124471813620f0af2ebbad" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9784641 VIP website status:| No Check rc-m.dk SSL...

Linux kernel memory corruption vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A memory corruption vulnerability exists in the net/core/skbuff.c file in Linux kernel version 4.7-rc6. An attacker can exploit this vulnerability to cause the kernel to crash...

MantisBT 1.3.x < 1.3.0-rc.2 SOAP API Information Disclosure Vulnerability - Windows

MantisBT is prone to an incomplete blacklist vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mantisbt:mantisbf";...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the rootdir/init.rc function in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

Absolute RC Heli Sim - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Absolute RC Heli Sim published at the 'play' market has multiple vulnerabilities...

RC-AirSim - RC Model Plane Sim - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application RC-AirSim - RC Model Plane Sim published at the 'play' market has multiple vulnerabilities...