CVE-2016-7044

The unformat24bitcolor function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service heap corruption and crash via an incomplete 24bit color code...

CVE-2016-7044

The unformat24bitcolor function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service heap corruption and crash via an incomplete 24bit color code...

Apache struts2 devMode Remote Code Execution Vulnerability

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications . Apache struts2 devMode remote code execution vulnerability , the vulnerability i...

True Contacts - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application True Contacts published at the 'play' market has multiple vulnerabilities...

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

Apple OS X TTF Remote Code Execution Vulnerability

Apple OS X is an operating system from Apple. A remote code execution vulnerability exists in Apple OS X TTF. The vulnerability stems from a failure to properly handle TTF fonts and bdat tables, allowing an attacker to exploit the vulnerability to elevate privileges and execute arbitrary code...

SSO Authentication Bypass and Website Takeover in DOKEOS

High-Tech Bridge Security Research Lab discovered a high-risk vulnerability in a popular e-learning software DOKEOS. A remote unauthenticated attacker can bypass authentication process and login to the vulnerable website with an arbitrary account including administrator's one. Successful...

Microsoft Unicode Scripts Processor Arbitrary Code Execution Exploit

On the 8th December 2015, Microsoft released Security Bulletin MS15-130 to fix a vulnerability in Unicode Scripts Processor component found by Secunia Research. The vector for a successful exploitation is a specially crafted "True Type Font" TTF file, which typically can be embedded in e.g...

PT-2015-3443 · Microsoft · Lync Basic +7

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 3.0 SP2 through 4.5.2 Microsoft Office versions 2007 SP3 through 2010 SP2 Microsoft Live Meeting version 2007 Console Microsoft Lync versions 2010 through 2013 SP1 Microsoft Lync Basic version 2013 SP1...

SearchBlox Information Disclosure Vulnerability

SearchBlox is an enterprise search solution , built on Lucene . SearchBlox has a security vulnerability that allows an attacker to obtain sensitive information by submitting a special cluster/health URI that contains a pretty=true action...

freetype: buffer over-read and integer underflow in tt_face_load_kern()

The ttfaceloadkern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted TrueType font...

Microsoft Windows TrueType Font Parsing Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows 'Win32k.sys' handling TrueType fonts allows attackers to exploit the vulnerability to construct malicious fonts that can be tricked into parsing by the user, which can elevate privileges to execute...

CVE-2015-0222

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when showhiddeninitial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries...

PT-2014-1743 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for the vulnerability Description: The issue is related to the improper handling of TrueType fonts by the kernel-mode driver in Windows, allowing remote attackers to execu...

VulnCheck KEV: CVE-2014-4148

A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts...

Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit

No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...

True North Software Internet Anywhere Mail Server 2.3.x Mail Server Multiple Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/730/info True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands list, retr .uidl and user and the SMT...

Acronis True Image Echo Enterprise Server 9.5.0.8072 - Multiple Remote Denial of Service Vulnerabilities

No description provided by source...

True North Software Internet Anywhere Mail Server 3.1.3 RETR DoS

No description provided by source. source: http://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson error message will appear reporting an access...

OpenASP <= 3.0 - Blind SQL Injection Vulnerability

No description provided by source. / OpenASP = 3.0 Blind SQL Injection Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit thanks XaDoS,anyway i've found another sql injection http://openasp.it -----------------------------------------------------...