PT-2017-19136

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overflow issue occurs when updating custom EDID hdmi...

buprenorphine-doctors.com XSS vulnerability

Open Bug Bounty ID: OBB-447318 Description| Value ---|--- Affected Website:| buprenorphine-doctors.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

conpct6.harriscountytx.gov XSS vulnerability

Vulnerable URL: https://conpct6.harriscountytx.gov/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

PT-2017-4236

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.3 Description The issue is related to a buffer overflow in the brcmf cfg80211 mgmt tx function. This can be exploited to cause a denial of service, resulting in a system crash, or potentially to gain...

houstonboxoffice.com XSS vulnerability

Vulnerable URL: https://www.houstonboxoffice.com/tickets.php?/Guy,-Monica,-112/Smart-Financial-Centre-TX/=1"...

CVE-2017-9586

The "FSBY Mobile Banking" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9569

CVE-2017-9569 affects the Citizens Bank (TX) cbtx-on-the-go/id892396102 iOS app version 3.0.0, which does not verify X.509 certificates from SSL servers. This permits a network-based attacker to perform a MITM and obtain sensitive information via a crafted certificate. Root cause: missing TLS cer...

CVE-2017-9586

The CVE-2017-9586 entry concerns the FSBY Mobile Banking iOS app (3.0.0). The root cause is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The public sources in th...

mcpl-websvr.co.midland.tx.us XSS vulnerability

Vulnerable URL: http://mcpl-websvr.co.midland.tx.us/TLCScripts/interpac.dll?Browse Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

classifieds.star-telegram.com XSS vulnerability

Vulnerable URL: http://classifieds.star-telegram.com/fort-worth-tx/all-categories/search?searchtype=advanced"'--!prompt/OPENBUGBOUNTY///...

Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

DEBIAN-CVE-2015-8701

QEMU aka Quick Emulator built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit tx descriptors in 'txconsume' routine, if a descriptor was to have more than allowed ROCKERTXFRAGSMAX=16 fragments. A privileged user inside guest coul...

arlington-tx.gov XSS vulnerability

Vulnerable URL: http://www.arlington-tx.gov/globalsearch/?mssearch="=1=all=60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 146976 VIP website status:| No Check arlington-tx.gov S...

Qemu imx_fec_do_tx() function infinite loop vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An infinite loop vulnerability exists in the imxfecdotx function in QEMU, which can be exploited by an attacker with privileges to launch a DoS attack to crash QEMU...

PT-2016-7422

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the imx fec do tx function in QEMU, which does not properly limit the buffer descriptor count when transmitting packets. This allows local guest OS administrators to caus...

PT-2016-7153

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue is related to an integer overflow in the net tx pkt init function, which can cause a denial of service. This happens when the maximum fragmentation count triggers an...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

PT-2016-3956

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is caused by an off-by-one error in the tx consume routine when processing transmit descriptors with more than the allowed number of fragments. This can be exploited by a privileged us...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...

TX Poker - Texas Holdem Poker - Dangerous filesystem permissions, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application TX Poker - Texas Holdem Poker published at the 'play' market has multiple vulnerabilities...