Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

DEBIAN-CVE-2015-8701

QEMU aka Quick Emulator built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit tx descriptors in 'txconsume' routine, if a descriptor was to have more than allowed ROCKERTXFRAGSMAX=16 fragments. A privileged user inside guest coul...

arlington-tx.gov XSS vulnerability

Vulnerable URL: http://www.arlington-tx.gov/globalsearch/?mssearch="=1=all=60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 146976 VIP website status:| No Check arlington-tx.gov S...

Qemu imx_fec_do_tx() function infinite loop vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An infinite loop vulnerability exists in the imxfecdotx function in QEMU, which can be exploited by an attacker with privileges to launch a DoS attack to crash QEMU...

PT-2016-7422

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the imx fec do tx function in QEMU, which does not properly limit the buffer descriptor count when transmitting packets. This allows local guest OS administrators to caus...

PT-2016-7153

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue is related to an integer overflow in the net tx pkt init function, which can cause a denial of service. This happens when the maximum fragmentation count triggers an...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...

TX Poker - Texas Holdem Poker - Dangerous filesystem permissions, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application TX Poker - Texas Holdem Poker published at the 'play' market has multiple vulnerabilities...

houstontx.gov XSS vulnerability

Vulnerable URL: http://www.houstontx.gov/planning/urban/viewer.swf?xmlDataPath=http://45.55.162.179/vuln.xml Details: Description| Value ---|--- Patched:| Yes, at 17.12.2015 Latest check for patch:| 17.12.2015 06:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

CVE-2015-5992

Cross-site scripting XSS vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to inject arbitrary web script or HTML via the ssid parameter...

CVE-2015-5991

Cross-site request forgery CSRF vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perfo...

CVE-2015-5992

The CVE-2015-5992 entry concerns Cross-Site Scripting (XSS) in the form2WlanSetup.cgi page of PLDT SpeedSurf 504AN (firmware GAN9.8U26-4-TX-R6B018-PH.EN) and Kasda KW58293 devices. The vulnerability arises from insufficient filtering of the ssid parameter, enabling a remote attacker to inject arb...

DEBIAN-CVE-2013-4530

Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted txfifohead and rxfifohead values in a savevm image...

PT-2014-7832

Name of the Vulnerable Software and Affected Versions TYPO3 JobControl dmmjobcontrol extension versions 2.14.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tx dmmjobcontrol pi1searchkeyword parameter to the "jobs/"...

Design/Logic Flaw

The tx Smart aka com.wooriwm.txsmart application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5959

The CVE-2014-5959 case concerns the Android app tx Smart (com.wooriwm.txsmart) version 7.05, where SSL TLS validation is missing for X.509 certificates. This vulnerability allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Ac...

CVE-2014-5959: Undefined Security Weakness

The tx Smart aka com.wooriwm.txsmart application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

jetAudio 7.1.9.4030 plus vx - (.m3u) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

CVE-2013-4544

CVE-2013-4544 affects QEMU’s VMXNET3 NIC emulation (hw/net/vmxnet3.c) in versions including 2.0.0-rc0, 1.7.1 and earlier. The root cause is improper handling of queue/interrupt state for the VMXNET3 device, enabling a local guest user to trigger a denial of service or potentially execute arbitrar...