Security update for ImageMagick (moderate)

This update for ImageMagick fixes the following issues: Security issues fixed: CVE-2018-14434: A memory leak for a colormap in WriteMPCImage incoders/mpc.c was fixed. bsc1102003 CVE-2018-14435: A memory leak in DecodeImage in coders/pcd.c was fixed. bsc1102007 CVE-2018-14436: A memory leak in...

alfasud-parts.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-666127 Description| Value ---|--- Affected Website:| alfasud-parts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

datakasse.mystore.no XSS vulnerability

Open Bug Bounty ID: OBB-665967 Description| Value ---|--- Affected Website:| datakasse.mystore.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

high-heels-perfect.de XSS vulnerability

Open Bug Bounty ID: OBB-655627 Description| Value ---|--- Affected Website:| high-heels-perfect.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shop.xion.de XSS vulnerability

Open Bug Bounty ID: OBB-648763 Description| Value ---|--- Affected Website:| shop.xion.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

khk.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-648737 Description| Value ---|--- Affected Website:| khk.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rastawinkel.nl XSS vulnerability

Open Bug Bounty ID: OBB-644580 Description| Value ---|--- Affected Website:| rastawinkel.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

inktrunner.nl XSS vulnerability

Open Bug Bounty ID: OBB-642398 Description| Value ---|--- Affected Website:| inktrunner.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13226

The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13231

The sell function of a smart contract implementation for ENTER ENTR Contract Name: EnterToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13228

The sell function of a smart contract implementation for Crowdnext CNX, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13207

The sell function of a smart contract implementation for PornCoin PRNC, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13222

The sell function of a smart contract implementation for ObjectToken OBJ, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

ARM mbedTLS Design Vulnerability

ARM mbedTLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in the 'mbedtlssslgetverifyresult' function in ARM mbedTLS version 2.7.0 and earlier, which stems from the program's failure to properly sign...

DEBIAN-CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

Chrome V8 PromiseAllResolveElementClosure Element Confusion Vulnerability

Exploit for multiple platform in category dos / poc Chrome: V8: PromiseAllResolveElementClosure can cause elements kind confusion The Promise.all method internally uses PromiseAllResolveElementClosure...

saartjeprum.nl XSS vulnerability

Open Bug Bounty ID: OBB-628211 Description| Value ---|--- Affected Website:| saartjeprum.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

doubleavineyards.com XSS vulnerability

Open Bug Bounty ID: OBB-619409 Description| Value ---|--- Affected Website:| doubleavineyards.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goktx.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-611986 Description| Value ---|--- Affected Website:| goktx.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mundokiriko.com XSS vulnerability

Open Bug Bounty ID: OBB-608877 Description| Value ---|--- Affected Website:| mundokiriko.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...