ZZIPlib Denial of Service Vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipdiskfindfirst' function in the zzip/mmapped.c file in ZZIPlib version 0.13.67. An attacker can exploit the vulnerability to cause a bus error when handling disk64trailer find values...

Denial Of Service (DoS)

ZZIPlib is vulnerable to denial of service DoS attacks. It is possible that a zip file will cause a bus error due to the loading of a misaligned address in the zzipfetchdisktrailer function...

DEBIAN-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

PT-2018-3393

Name of the Vulnerable Software and Affected Versions: ZZIPlib version 0.13.67 Description: The issue is related to insufficient input validation in the zzip fetch disk trailer function of the ZZIPlib archiving library. This can be exploited by a remote attacker using a specially crafted zip file...

PT-2018-3395

Name of the Vulnerable Software and Affected Versions: ZZIPlib version 0.13.67 Description: The issue is related to insufficient input validation in the zzip fetch disk trailer function of the ZZIPlib archiving library. This can be exploited by remote attackers to cause a denial of service using ...

ZZIPlib '__zzip_fetch_disk_trailer' function denial of service vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipfetchdisktrailer' function in the zzip/zip.c file in ZZIPlib version 0.13.67. A remote attacker can exploit this vulnerability to cause a denial of service via a specially crafted zip file...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.58.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: HTTP authentication leak in redirects HTTP/2...

CURL-CVE-2018-1000005 HTTP/2 trailer out-of-bounds read

libcurl contains an out bounds read in code handling HTTP/2 trailers. It was reported that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once...

PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

PT-2017-14929

Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...

aice.org XSS vulnerability

Vulnerable URL: http://www.aice.org/trailers/newyork2014/qtpopup.php?name=Xss%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=Final%20Cut,%20USA,%20Inc.=Poster%20of%20%27A%20Streetcar%20Named%20Desire%27%20as%20an%20Urban%20Love%20Story%20=Co-Winner=PhillThumb02.png Details: Description| Value ---|-...

fagantrucktrailer.com XSS vulnerability

Vulnerable URL: http://www.fagantrucktrailer.com/preownedlist.asp?GroupBy=1%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=N=0=0=0===search=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

privatecasting-x.com XSS vulnerability

Open Bug Bounty ID: OBB-227943 Description| Value ---|--- Affected Website:| privatecasting-x.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KINO.de Filme Trailer Programm - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application KINO.de Filme Trailer Programm published at the 'play' market has multiple vulnerabilities...