Antisip libosip2 4.1.0 Heap Buffer Overflow / Denial Of Service

Antisip's libosip2 v4.1.0 is vulnerable to heap buffer overflows in the following functions while parsing SIP messages and leads to a DoS if glibc hardening is enabled. 1. osipbodytostr 2. osipmessagetostr All files for reproducing the issues have been filed in the bug tracker 12 and have since...

libtorrent-rasterbar: denial of service

A bug has been found in the libtorrent-rasterbar code handling GZIP-encoded responses from a tracker, where malformed responses could lead to a crash...

MantisBT 'Content Security Policy' Security Bypass Vulnerability

MantisBT is the MantisBT team of a Web-based open source defect tracking system . A security bypass vulnerability exists in the MantisBT 'Content Security Policy'. An attacker could exploit the vulnerability to bypass security restrictions and obtain potentially sensitive information...

rutland-times.co.uk XSS vulnerability

Vulnerable URL: http://www.rutland-times.co.uk/search?query=lol%20hi=%22-prompt%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2579596 VIP website status:| ...

Microsoft Internet Explorer - MSHTML!CMultiReadStreamLifetimeManager::ReleaseThreadStateInternal Read AV

function eventhandler1 CollectGarbage; function eventhandler5 try /FileReader/ var var00063 = new FileReader; catcherr //line 68 try /Blob/ var var00064 = new Blob; catcherr //line 69 try var00063.readAsDataURLvar00064; catcherr //line 70 iiThS9lJ8 A7...

Zabbix Agent 3.0.1 mysql. size shell command injection

CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from http://repo.zabbix.com/zabbix/3.0/debian is vulnerable. Other versions were not tested. Background ========== "Zabbix agent is deployed on a...

CVE-2016-5131

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function...

Bug Tracker 2.7.1 Information Disclosure

======================================================================== | Title : Bug Tracker V 2.7.1 database disclosure vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : https://www.twbsd.org/demo/...

SI Book Tracker - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SI Book Tracker published at the 'play' market has multiple vulnerabilities...

Debian DLA-511-1 : libtorrent-rasterbar security update

A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent in the parsechunkheader function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of crashing it. F...

Joomla Affiliate Tracker 2.0.3 SQL Injection

Exploit Title : Joomla comaffiliatetracker - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/affiliate-tracker Category: Webapps Tested on: Win Version: 2.0.3 Date: 2016/06/13 PoC: First Login To Panel And Go To Affiliate Tracker userid...

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection -------------------------------------------------------------------- Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from...

[SECURITY] Security support for Wheezy handed over to the LTS team

As of 25 April, one year after the release of Debian 8, alias "Jessie", and nearly three years after the release of Debian 7, alias "Wheezy", regular security support for Wheezy comes to an end. The Debian Long Term Support LTS Team will take over security support. Information for users...

[SECURITY] Security support for Wheezy handed over to the LTS team

As of 25 April, one year after the release of Debian 8, alias "Jessie", and nearly three years after the release of Debian 7, alias "Wheezy", regular security support for Wheezy comes to an end. The Debian Long Term Support LTS Team will take over security support. Information for users...

GitLab: GFM renderer leaks external issue tracker URL of private project

Vulnerability details The GFM renderer has the ability to cross-link issues between projects. When this project is private and the user doesn't have access, the link isn't made. This is good. However, when the private project has an external issue tracker set up, an attacker can extract the...

DHL Tracker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DHL Tracker published at the 'play' market has multiple vulnerabilities...

Period Calendar, Cycle Tracker - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Period Calendar, Cycle Tracker published at the 'play' market has multiple vulnerabilities...

Period Tracker, My Calendar - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Period Tracker, My Calendar published at the 'play' market has multiple vulnerabilities...

Deliveries Package Tracker - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Deliveries Package Tracker published at the 'play' market has multiple vulnerabilities...

GitLab: Persistent XSS on public project page

Details A project admin can set up a custom issue tracker integration. This setting misses a check to make sure that it's a real URL and, thus, can use the javascript handler to execute arbitrary Javascript. Browsers use this handler to execute inline Javascript. This can lead to an account take...