src-reizen.nl XSS vulnerability

Open Bug Bounty ID: OBB-596669 Description| Value ---|--- Affected Website:| src-reizen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Samsung Mobile Device Email Application Cross-Site Scripting Vulnerability

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android M is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Email application is one of the email applications. Email application is one of the email...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

PT-2018-18882

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with M6.0 software Description The issue affects the Email application, allowing for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute. Recommendations For Samsung mobile...

CVE-2018-9140: Improper Neutralization of Input During Web Page Generation

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

PT-2018-18756

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue is related to a crafted src attribute of an IMG element within a URI, which can lead to XSS. Recommendations For Open-AudIT Professional version 2.1, consider validating and sanitizing...

CVE-2018-8978: Improper Neutralization of Input During Web Page Generation

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

PT-2018-3324

Name of the Vulnerable Software and Affected Versions: GNOME file-roller versions prior to 3.29.91 Description: The issue allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. This is related to the sanitize filename functio...

CVE-2018-1000070

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...

PT-2018-9256

Name of the Vulnerable Software and Affected Versions: PyBitmessage version v0.6.2 Description: The issue concerns a code execution vulnerability due to an eval injection in the main program, specifically in the constructObject function within the file src/messagetypes/ init .py. This vulnerabili...

CVE-2018-1000070: Improper Control of Generation of Code

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...

CVE-2018-1000100

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

CVE-2018-1000100: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

PT-2018-3515

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box versions 0.7.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the memory, which can be exploited to execute arbitrary code. This can be achieved by providing a specially crafted MP4 file to the...

CVE-2018-7714

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because pixels = 130 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can raise...

CVE-2018-7713: Reachable Assertion

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because size.width = 120 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can...

CVE-2018-7714: Reachable Assertion

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because pixels = 130 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can raise...