PT-2018-14759

Name of the Vulnerable Software and Affected Versions GE Mark VIe versions 03.03.28C through 05.02.04C EX2100e versions prior to 04.09.00C EX2100e Reg versions prior to 04.09.00C LS2100e versions prior to 04.09.00C Description The affected versions of the application have a path traversal issue...

Google Android Buffer Overflow Vulnerability (CNVD-2018-25279)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'ixheaacdadtscrcstartreg' function of the ixheaacdadtscrcstartreg file in Android version 9, which stems from a lack of boundary...

CVE-2018-9578

In ixheaacdadtscrcstartreg of ixheaacdadtscrccheck.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Version...

reg-visitor.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-663632 Description| Value ---|--- Affected Website:| reg-visitor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

oniguruma: Invalid pointer dereference in left_adjust_char_head()

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in leftadjustcharhead during regular expression compilation. Invalid handling of reg-dmax in forwardsearchrange could result in an invalid pointer...

CVE-2018-8883

Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...

UBUNTU-CVE-2018-8883

Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...

PT-2018-18689

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a buffer over-read in the parse line function, located in asm/parser.c. This occurs due to uncontrolled access to nasm reg flags. Recommendations For Netwide Assembl...

Login-Reg Members Management PHP 1.0 - Arbitrary File Upload

Login-Reg Members Management PHP 1.0 - Arbitrary File Upload Exploit Title: Login-Reg Members Management PHP 1.0 - Arbitrary File Upload Dork: N/A Date: 28.08.2017 Vendor Homepage : https://www.codester.com/user/mostalo Software Link:...

smartreading.ru XSS vulnerability

Vulnerable URL: https://www.smartreading.ru/reg/personal/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 199741 VIP website status:| No Check smartreading.ru SSL connection:| Grade...

DEBIAN-CVE-2017-9227

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbcenclen during regular expression searching. Invalid handling of reg-dmin in forwardsearchrange could result in an invalid pointer...

UBUNTU-CVE-2017-9227

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbcenclen during regular expression searching. Invalid handling of reg-dmin in forwardsearchrange could result in an invalid pointer...

Nanjing Guanbao Technology Development Co., Ltd. Guanbao online examination system has logical design flaws and loopholes

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. A logical design flaw exists in the FrmOtherRegUser.aspx page of the Nanjing Guanbao Technology Development Co. It allows an attacker to use the isnew parameter to determine whether...

CVE-2016-6492

The MT6573FDVTSetRegHW function in camerafdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOCTSETFDCONFCMD IOCTL call...

CVE-2015-2868: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting...

ikapusta.com.ua XSS vulnerability

Vulnerable URL: https://ikapusta.com.ua/[email protected]=8%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2933083 VIP...

pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...

HP Client 9.19.08.17.9 - Command Injection

HP Client 9.19.08.17.9 - Command Injection Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1...

DEBIAN-CVE-2016-4439

The espregwrite function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or potentially execute arbitrary code o...

reg-bar.ru XSS vulnerability

Vulnerable URL: http://reg-bar.ru/new.php?servername=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...