soxprospects.com XSS vulnerability

Vulnerable URL: http://www.soxprospects.com/stats/hitting.php?split=0=1=1"...

mthighschoolstats.com XSS vulnerability

Vulnerable URL: http://www.mthighschoolstats.com/teamstats.php?sport=bbb=A=Southwestid=1"...

itf.phone-rencontre.com XSS vulnerability

Open Bug Bounty ID: OBB-231145 Description| Value ---|--- Affected Website:| itf.phone-rencontre.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora 24 : tcpreplay (2017-7980b5e846)

Here is what is fixed in this release : - Fix reporting of rates 1Mbps 348 - Option --unique-ip not working properly 346 ---- Features and fixes include : - MAC rewriting capabilities by Pedro Arthur 313 - Fix several issues identified by Coverity 305 - Packet distortion --fuzz-seed option by...

Cross site scripting

Revive Adserver before 3.2.3 suffers from Reflected XSS. www/admin/stats.php is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...

Fedora 25 : suricata (2017-f3aac83a8f)

This is a new upstream feature and security release. Improvements include: bypass; pre-filter -- fast packet keywords; TLS improvements; ICS protocol additions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction; NIC offloading disabled by default; unix socket enabled by default;...

Fedora 24 : suricata (2017-f9f3a78148)

This is a new upstream feature and security release. Improvements include: bypass; pre-filter -- fast packet keywords; TLS improvements; ICS protocol additions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction; NIC offloading disabled by default; unix socket enabled by default;...

Analytics Stats Counter Statistics - Unauthenticated PHP Object Injection

The stats-counter WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...

WordPress NewStatPress 1.2.4 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptinginthewordpressnewstatpressplugin.html Abstract A persistent Cross-Site Scripting XSS vulnerability has been found in the WordPress NewStatPress plugin. By using this...

old.post-gazette.com XSS vulnerability

Vulnerable URL: http://old.post-gazette.com/highschoolsports/stats/teamrecord.asp?teamtypeid=3=462BE555-D7F9-11D5-A78D-003048215596"--!"=18' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Android Privilege Escalation

The vulnerability of the drivers/media/platform/msm/camerav2/isp/msmispstatsutil.c component of Qualcomm’s Android operating system is related to the lack of checks for certain index values. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially...

Android Information Disclosure

The vulnerability of the SurfaceFlinger service in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially created application associated with the default...

UBUNTU-CVE-2014-9869

drivers/media/platform/msm/camerav2/isp/msmispstatsutil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain index values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749728 and Qualco...

PT-2016-2635

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain index values in the msm isp stats util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via ...

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

Fedora Update for kf5-kactivities-stats FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kf5-kactivities-stats FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: kf5-kactivities-stats-5.24.0-1.fc23

A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the activities system...

[SECURITY] Fedora 24 Update: kf5-kactivities-stats-5.24.0-1.fc24

A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the activities system...

Linux Input Output Statistics

The vulnerability in the kernel/taskstats.c module of Linux allows local users to access input/output statistics by sending the taskstats command via the netlink socket. For example, a malicious actor can use this vulnerability to obtain information about the length of another user’s password...