Semrush: Ad Builder Display Ads Path Traversal

Summary: The Semrush Ad Builder for Display Ads is vulnerable to path traversal when extracting zip files and referencing images from the embedded data.csv file. Description: The Semrush Ad Builder for Display Ads allows users to import Display Ads from an uploaded zip file. The backend...

UBUNTU-CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

DEBIAN-CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

ALPINE-CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

Microsoft Edge Information Leakage Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge that stems from the program's failure to properly handle referencing policies. A remote attacker...

[ExploitSearch.net] Exploit / Vulnerability Search Engine

Exploitsearch.net , is an attempt at cross referencing/correlating exploits and vulnerability data from various sources and making the resulting database available to everyone. Unlike other exploit search engines which are simply custom google searches, this site actually crawls the source...

Google Chrome multiple vulnerabilities - Jan11 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjan11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - Jan11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

CVE-2009-2845

The CVE-2009-2768 entry describes a vulnerability in the Linux kernel flat subsystem (fs/binfmt_flat.c: load_flat_shared_library) prior to 2.6.31-rc6. Local users could trigger a denial of service by executing a shared flat binary, causing a NULL pointer dereference and a system crash (potential ...

Net:: DNS denial of service

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

Code injection

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

DEBIAN-CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...

PT-2007-1040 · Net +1 · Net::Dns +1

Name of the Vulnerable Software and Affected Versions: Net::DNS versions prior to 0.60 Description: The issue allows remote attackers to cause a denial of service, specifically stack consumption, via a malformed compressed DNS packet with self-referencing pointers. This triggers an infinite loop,...

DEBIAN-CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-4256

The CVE-2006-4256 issue affects the Horde Application Framework prior to 3.1.2, where index.php can include web pages from other sites via the url parameter, enabling cross-site referencing that could aid phishing. Affected platforms and advisories corroborate remote inclusion risks, with related...

[Full-disclosure] [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing

Horde Framework and Horde IMP /index.php cross site referencing scip AG Vulnerability ID 2456 08/16/2006 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456 I. INTRODUCTION Horde is an open-source web application framework based on PHP. It offers popular applications, such as the Horde IMP mail...

GLSA-200608-03 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200608-03 Mozilla Firefox: Multiple vulnerabilities The following vulnerabilities have been reported: Benjamin Smedberg discovered that chrome URL's could be made to reference remote files. Developers in the Mozilla community look...

CVE-2006-0793

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...