CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

The vulnerability CVE-2015-8621 affects the t-coffee tool (versions before 11.00.8cbe486-2). It is an out-of-bounds/write vulnerability that allows a local attacker to write to the user’s home file: ~/.t_coffee, i.e., a local write to a user file globally. Impact is confined to local access; expl...

CVE-2017-11394

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544...

Gas Pump Skimmer Sends Card Data Via Text

Skimming devices that crooks install inside fuel station gas pumps frequently rely on an embedded Bluetooth component allowing thieves to collect stolen credit card data from the pumps wirelessly with any mobile device. The downside of this approach is that Bluetooth-based skimmers can be detecte...

t-timez.com XSS vulnerability

Vulnerable URL: http://www.t-timez.com/clubs/newMember.asp?Operation=1"...

captiveaire.com XSS vulnerability

Open Bug Bounty ID: OBB-255955 Description| Value ---|--- Affected Website:| captiveaire.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

t-sma.net XSS vulnerability

Vulnerable URL: http://t-sma.net/detail/index/599975/18975927// Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1241055 VIP website status:| No Check...

b-and-t-world-seeds.com XSS vulnerability

Vulnerable URL: http://b-and-t-world-seeds.com/cartall.asp?species=Psophocarpus%20tetragonolobus%20blue%20fld.%22--!%3E%3CSvg/Onload=confirm'OPENBUGBOUNTY'%3E%22=5336 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status...

[SECURITY] Fedora 26 Update: libtasn1-4.12-1.fc26

A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding func tions...

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

Executive Summary In October of 2016, former Rapid7 researcher Phil Bosco discovered a number of relatively low-risk vulnerabilities and issues involving home security systems that are common throughout the United States, and which have significant WiFi or Ethernet capabilities. The three systems...

dealer.invoice.t-mobile.com XSS vulnerability

Vulnerable URL: https://dealer.invoice.t-mobile.com/bd/public/framesettophtml.jsp?x=test%22%27--!%3E%3CHtml%20Onmouseenter=confirmOPENBUGBOUNTY%20%3C!--//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Public...

fota.t-mobile.com XSS vulnerability

Vulnerable URL: http://fota.t-mobile.com/jsp/login/login.jsp?url=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 02.01.2018 Latest check for patch:| 02.01.2018 20:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

OnePlus 3 and 3T OxygenOS security bypass vulnerability (CNVD-2017-06819)

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system that comes with the device. A security spare vulnerability exists in OxygenOS versions prior to 4.0.3 on OnePlus 3 and 3T devices. An unauthorized attacker could exploit the...

CVE-2017-5625

In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition except 'keystore' by issuing the 'fastboot oem dump ' fastboot command...

Over 85% Of Smart TVs Can Be Hacked Remotely Using Broadcasting Signals

The Internet-connected devices are growing at an exponential rate, and so are threats to them. Due to the insecure implementation, a majority of Internet-connected embedded devices, including Smart TVs, Refrigerators, Microwaves, Security Cameras, and printers, are routinely being hacked and used...

CVE-2017-5622

With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other...

Debian Security Advisory DSA 3817-1 (jbig2dec - security update)

Multiple security issues have been found in the JBIG2 decoder library, which may lead to lead to denial of service or the execution of arbitrary code if a malformed image file usually embedded in a PDF document is opened. OpenVAS Vulnerability Test $Id: deb3817.nasl 6607 2017-07-07 12:04:25Z...

OnePlus OxygenOS Local Security Bypass Vulnerability

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system it comes with. A local security bypass vulnerability exists in OnePlus OxygenOS. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized...

t-mobile.at XSS vulnerability

Vulnerable URL: http://www.t-mobile.at/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39935 VIP website status:| Yes Check t-mobile.at SSL connection:| Grade: A+ Coordinated...