DEBIAN-CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

camachinetools.com XSS vulnerability

Vulnerable URL: http://www.camachinetools.com/machines.php?for-sale=Press%20Brake=Used=1"...

imedmobility.com XSS vulnerability

Vulnerable URL: http://www.imedmobility.com/wheelchair-vans-for-sale/used-wheelchair-vans.php?resultpage=1"...

UPM - "Most used" section on the start menu not populated correctly

The "Most Used" section in the Start menu is not populated correctly in the user profile when logging on to Windows 8 / Windows 10 / Windows server 2012 VDA...

alfarvsource.com XSS vulnerability

Open Bug Bounty ID: OBB-252572 Description| Value ---|--- Affected Website:| alfarvsource.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-7497

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7494

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7491

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7496

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7483

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

Network-Analysis-Tools - Pcap Capture File Analysis Tool

Pcap Capture File Analysis Tool Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Packet Filter 10-Smtp Analysis 11-Web Attack Detect Installation Modules $ pip install pyshark $ pip install...

CVE-2016-1000216: Improper Neutralization of Special Elements used in an OS Command

Ruckus Wireless H500 web management interface authenticated command injection...

thailandusedcars.com XSS vulnerability

Open Bug Bounty ID: OBB-184789 Description| Value ---|--- Affected Website:| thailandusedcars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

andymohr-nissan.com XSS vulnerability

Vulnerable URL: http://www.andymohr-nissan.com/used-vehicles/action=imajaxcall=getresults=%22%3E%3Cscript%3Ealert%2Fxssposed%2F%3C%2Fscript%3E=1allfilters=false&postid=5 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the accessibility of protected information

The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure using a specially crafted certificate. In this case, the UTF-8 character encoding is not used in the relevant context...

Search for used cars to buy - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Search for used cars to buy published at the 'play' market has multiple vulnerabilities...

DEKRA Used Car Report - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DEKRA Used Car Report published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the Firefox browser exists due to insufficient checking of the status of resources when they can be used together. Exploiting this vulnerability allows a malicious actor to cause a service failure the inability to use the resource after it has been released or have other...

async-http-client: SSL/TLS certificate verification is disabled under certain conditions

It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle MITM attacker could use this flaw to spoof a valid certificate...

US Navy Soliciting Zero Days

The National Security Agency may find and purchase zero days, but that doesn’t mean it’s sharing its hoard with other government agencies such as the U.S. Navy, which apparently is in the market for some unpatched, undisclosed vulnerabilities of its own. A request for proposal posted last...