Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. Passing a large size value to the application causes a SIGABRT signal during the Exiv2::Internal::PngChunk::zlibUncompress function call through types.cpp, leading to the application crashing...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service DoS attacks. The library contains a use-after-free bug in the fctxstoptimer function in the lib/dns/resolver.c file, allowing a malicious user to pass a DNS packet to cause an assertion failure and crash the application...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists through an invalid memory dereference bug in Evix2::DataValue::read of value.cpp that causes a denial of service DoS attack when parsing a malicious exif...

Heap-Based Buffer Over-read

libexiv2.so is susceptible to heap-based buffer over-read. A flaw in the byteSwap2 function in image.cpp causes the application to crash...

wir-waren-so-frei.de XSS vulnerability

Open Bug Bounty ID: OBB-613257 Description| Value ---|--- Affected Website:| wir-waren-so-frei.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can pass a file to the application to cause an invalid free that can crash the application...

1100.so XSS vulnerability

Open Bug Bounty ID: OBB-610940 Description| Value ---|--- Affected Website:| 1100.so Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial Of Service (DoS) Through Null Pointer Dereference

libkrb5.so is vulnerable to denial of service DoS through null pointer dereference attacks. The vulnerability exists as a null pointer dereference issue can be caused in kadm5createprincipal3 of svrprincipal.c, leading up to a denial of service DoS...

Out-of-Bounds Read

libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS through buffer overflow attacks. The vulnerability exists in the getmatchingdata function of krb5 that includes certauth plugin, and subsequently allowing both the CA certificate and the user's certificate to have long subjects, causing a denial o...

Denial Of Service (DoS) Through Null Pointer Dereference

libgraphite2.so is vulnerable to denial of service DoS through null pointer dereference attacks. The vulnerability exists in src/GlyphCache.cpp where the grfacedumbRendering flag, when -cache is enabled, leads to a null pointer dereference issue that causes the DoS...

Code injection

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...

A Deep Dive into Database Attacks [Part IV]: Delivery and Execution of Malicious Executables through SQL Commands (MySQL)

In a previous post we covered different techniques for execution of SQL and OS commands through Microsoft SQL server that can be used for delivering and executing malicious payloads on the target system. In this post we’ll discuss the same topic for MySQL database. Creating an executable directly...

so.3d66.com XSS vulnerability

Open Bug Bounty ID: OBB-583690 Description| Value ---|--- Affected Website:| so.3d66.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Solaris 10 (sparc) : 149108-01

SunOS 5.10: libgsf-1.so.1.8.2 patch. Date this patch was last updated by Sun : Dec/07/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 10 (sparc) : 152651-01

GNOME 2.6.0: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Solaris 10 (sparc) : 149112-01

SunOS 5.10: libglib-2.0.so.0.1800.3 patch. Date this patch was last updated by Sun : Mar/15/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 152724-01

GNOME 2.6.0: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : May/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 148003-01

SunOS 5.10x86: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 152725-01

GNOME 2.6.0x86: libgdk-pixbuf-2.0.so patc. Date this patch was last updated by Sun : May/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...