clonezilla.org XSS vulnerability

Open Bug Bounty ID: OBB-361038 Description| Value ---|--- Affected Website:| clonezilla.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2017-14089

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues...

PT-2017-11670

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue allows for out of bounds access in the c show function due to compat hwcap str not being NULL-terminated. This error ...

DEBIAN-CVE-2017-14519

In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls aka a Gfx.cc infinite loop...

UBUNTU-CVE-2017-14519

In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls aka a Gfx.cc infinite loop...

The vulnerability of the NoviWare operating system arises from buffer overflows during the execution of the “show log cli” command, allowing an attacker to gain superuser privileges.

The vulnerability of the NoviWare operating system arises due to an overflow in the buffer during the processing of the “show log cli” command. Exploiting this vulnerability allows a malicious actor, who operates remotely and has read access to data, to gain superuser privileges by using the...

Studio shows license error with no detailed error message

Studio show license error red cross but no detailed error message...

SQL injection vulnerability in the show.html/show.php page of the website building system of Sichuan Horizontal World Technology Co.

Ltd. is an Internet + solution provider and execution service provider. A SQL injection vulnerability exists in the show.html/show.php page of Sichuan Horizontal World Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, remote attacke...

DEBIAN-CVE-2017-13743

There is a buffer overflow in Liblouis 3.2.0, triggered in the function loushowString in utils.c, that will lead to a remote denial of service attack...

CVE-2017-12785

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user monitor role to gain privileged root code execution on the...

CVE-2017-12785

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user monitor role to gain privileged root code execution on the...

SQL injection vulnerability in show.php, view.php and a.php pages of Shenzhen Yitianlian Technology Co.

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. A SQL injection vulnerability exists in the show.php, view.php, and a.php pages of the website builder system of Shenzhen Yitianlian, which can be exploited by attackers to obtain...

eurobike-show.com XSS vulnerability

Vulnerable URL: http://www.eurobike-show.com/eb-en/contact/contact.php?id=JGLA%22%3E%3Cscript%3Ealert%270p3nBu6B0un7y%27;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Exploit for CVE-2017-8570

Introduction By Temesgen Yibeltal [email protected] Bas...

woodworkerssource.com XSS vulnerability

Vulnerable URL: http://www.woodworkerssource.com/showproperties.php?wood=1/-///'/"//--...

Show TV Canlı - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Show TV Canlı published at the 'play' market has multiple vulnerabilities...

Akamai Wins with Live OTT at NAB

The latest version of Akamai's Media Services Live streaming solution, featuring the addition of new liveOrigin capabilities specifically for live and 24/7 linear OTT video delivery, earned two awards at last week's 2017 NAB Show in Las Vegas. Streaming Media named it one of its six "Best of NAB"...

britishshowjumping.co.uk XSS vulnerability

Vulnerable URL: http://britishshowjumping.co.uk/show-calendar.cfm?showname=1%22--!%3E%3CSvg/Onload=confirm%27OPENBUGBOUNTY%27%3E%22=8%20%20=29/01/2017=17/09/2017 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

The 'Audience of You' at NAB

It's all about the "audience of you" as Akamai gears up for next week's 2017 NAB Show in Las Vegas. With that phrase, we're talking about helping to deliver the best possible experiences for each and every OTT video viewer. It's not an easy thing to do, but we're demonstrating a host of new...

Show TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Show TV published at the 'play' market has multiple vulnerabilities...