CVE-2016-7504

A use-after-free vulnerability was observed in RptoString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition...

UBUNTU-CVE-2016-7504

A use-after-free vulnerability was observed in RptoString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition...

PT-2016-7352

Name of the Vulnerable Software and Affected Versions MuJS versions prior to 5c337af4b3df80cf967e4f9f6a21522de84b392a Description A use-after-free issue was found in the Rp toString function, which can be exploited to achieve code execution or cause a denial of service condition. Recommendations...

ASUS RP-AC52 contains multiple vulnerabilities

Overview The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to cross-site request forgery and command injection. Description CWE-352:Cross-Site Request ForgeryCSRF- CVE-2016-6557 The RP-AC52 web interface does not sufficiently verify whether a valid reque...

RP ePaper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RP ePaper published at the 'play' market has multiple vulnerabilities...

rp-jobs.com XSS vulnerability

Vulnerable URL: http://www.rp-jobs.com/results.php?subcountyhiddenval========%22%22;%3C%2Fscript%3E%3Cscript%3Eprompt%28%2FXSSPOSED%2F%29%3C%2Fscript%3E%3C%22=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:10 GMT Vulnerability type:|...

QNAP Web Server Remote Code Execution

Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | [email protected] work / [email protected] other Employer homepage:...

QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | [email protected] work / [email protected] other Employer homepage:...

PT-2014-6487

Name of the Vulnerable Software and Affected Versions QNAP TS-469U version 4.0.7 Build 20140410 QNAP TS-459U affected versions not specified QNAP TS-EC1679U-RP affected versions not specified QNAP SS-839 affected versions not specified Description The issue allows local users to obtain usernames...

Juniper Junos Invalid PIM DoS (JSA10637)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. A remote attacker, by sending a specially crafted PIM packet, can crash and restart the RPD routing process. Note that this issue affects all PIM routers that are configured to...

CVE-2014-3819

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...

Input validation

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...

CVE-2014-3819

CVE-2014-3819 affects Juniper Junos OS RPD when Auto-RP is enabled. A remote attacker can crash the RPD routing process by sending a malformed PIM packet, causing a denial of service. Affected Junos versions include 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 bef...

CVE-2014-3819

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...

PT-2014-5526

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 through 11.4R12 Juniper Junos versions 12.1 through 12.1R10 Juniper Junos versions 12.1X44 through 12.1X44-D35 Juniper Junos versions 12.1X45 through 12.1X45-D25 Juniper Junos versions 12.1X46 through 12.1X46-D20...

CVE-2014-3819: Improper Input Validation

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (cisco-sa-20131030-asr1000)

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities : - Cisco IOS XE Software TCP Segment Reassembly Denial of Service Vulnerability CVE-2013-5543 - Cisco IOS XE Software Malformed EoGRE Packet Denial of Service...

CVE-2013-5549: Undefined Security Weakness

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

PT-2013-2933

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.x through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service by sending many crafted L2TP packets. Successful exploitation could trigger a reload of the Embedded Services...

Hacker charged for funding terrorist groups

A hacker 'Cahya Fitrianta' sentenced to eight years in prison by the West Jakarta District Court judges for hacking into many economic websites to steal money and funding that money to terrorist groups. He is also ordered to pay a Rp 500 million $51,000 fine. He is charged with breaking into many...