CVE-2019-6459: Missing Release of Memory after Effective Lifetime

An issue was discovered in GNU Recutils 1.8. There is a memory leak in recextracttype in rec-utils.c in librec.a...

PT-2019-18099 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: An issue was discovered in GNU Recutils. There is a NULL pointer dereference in the function rec fex size in the file rec-fex.c of librec.a. Recommendations: For GNU Recutils version 1.8, consider avoidin...

PT-2018-15428

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/system.php?rec=update" API endpoint has a cross-site scripting XSS issue via the site name parameter. Recommendations For DouPHP version 1.5 20181221,...

PT-2018-15427

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/page.php?rec=edit" endpoint has a cross-site scripting XSS issue via the page name parameter. Recommendations For DouPHP version 1.5 20181221,...

PT-2018-15430

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in the software, where the "admin/show.php?rec=update" API endpoint has a cross-site scripting XSS issue via the show name parameter. Recommendations For DouPHP version 1.5...

PT-2018-15431

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/article.php?rec=update" API endpoint has a cross-site scripting XSS issue via the title parameter. Recommendations For DouPHP version 1.5 20181221, avo...

PT-2018-15433

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/mobile.php?rec=system&act=update" endpoint has a cross-site scripting XSS issue via the mobile name parameter. Recommendations For DouPHP version 1.5...

PT-2018-15434

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/product category.php?rec=update" API endpoint has a cross-site scripting XSS issue via the cat name parameter. Recommendations For DouPHP version...

PT-2018-15432

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/article category.php?rec=update" API endpoint has a cross-site scripting XSS issue via the cat name parameter. Recommendations For DouPHP version...

PT-2018-15435

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/nav.php?rec=update" endpoint has a cross-site scripting XSS issue via the nav name parameter. Recommendations For DouPHP version 1.5 20181221,...

PT-2018-15429

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/product.php?rec=update" API endpoint has a cross-site scripting XSS issue via the name parameter. Recommendations For DouPHP version 1.5 20181221, avoi...

PT-2018-15363

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 Description The issue allows for a CSRF attack via the "upload/admin/manager.php?rec=insert" endpoint to add an administrator account. Recommendations For DouPHP version 1.5, consider implementing CSRF protection measures to...

PT-2016-2766

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.1.0 Description The issue is related to the Anti-Replay feature in the DTLS implementation, which mishandles early use of a new epoch number in conjunction with a large sequence number. This allows remote attackers ...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this feature after release in the FontTableRec destructor in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code by improperly using fonts contained in MathML, resulting in incorrect processing of the DirectWrite font object...

TR-REC GAME - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application TR-REC GAME published at the 'play' market has multiple vulnerabilities...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated...

Fedora 20 : mingw-gnutls-3.1.25-1.fc20 (2014-6953)

Version 3.1.25 released 2014-05-30 - libgnutls: Eliminated memory corruption issue in Server Hello parsing. Issue reported by Joonas Kuorilehto of Codenomicon. - libgnutls: Increased the maximum certificate size buffer in the PKCS 11 subsystem. - libgnutls: Check the return code of getpwuidr...

PT-2013-5998

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.10 Wireshark versions 1.10.x through 1.10.2 Description The issue is related to the ieee802154 map rec function in the IEEE 802.15.4 dissector, which uses an incorrect pointer chain. This allows remote...

PT-2012-5325

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.0 through 1.8.1 Description The issue is related to an integer signedness error in the vwr read rec data ethernet function, which can lead to a buffer overflow when processing a crafted packet-trace file. This can allow...

Nor-Rec Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...