PT-2018-14220 · Google · X/Net/Html

Name of the Vulnerable Software and Affected Versions: html package aka x/net/html versions through 2018-09-25 Description: The issue arises from the html package mishandling certain HTML tags, such as and , leading to a "panic: runtime error" index out of range during an html.Parse call. This...

Fast C++ CSV Parser Buffer Error Vulnerability

Fast C++ CSV Parser a.k.a. fast-cpp-csv-parser is a parser written in C++ for reading comma separated value CSV files. Fast C++ CSV Parser A heap buffer overflow vulnerability exists in the 'io::trimchars' function of the csv.h file in versions prior to 2018-07-06. An attacker can exploit this...

cstring memory leak vulnerability

cloudwu/cstring is a C-based string library. A memory disclosure vulnerability exists in cloudwu/cstring 2016-11-09 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service program crash...

CVE-2018-6583

creationtimestamp| type| source ---|---|--- 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44130...

CVE-2018-1203

creationtimestamp| type| source ---|---|--- 2018-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44039...

ebok.energa.pl XSS vulnerability

Vulnerable URL: https://ebok.energa.pl/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ebok.energa.pl SSL connection...

CVE-2017-9150

creationtimestamp| type| source ---|---|--- 2017-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42048...

MGASA-2015-0463 Updated python-django packages fix security vulnerability

If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format CVE-2015-8213...

tellyduniya.com XSS vulnerability

Vulnerable URL: http://www.tellyduniya.com/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=4=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 45599 Google Pagerank| 1 VIP...

Live CMS SQL Injection Vulnerability

No description provided by source. / - Live CMS SQL Injection Vulnerability - ---Date : 2010-06-17 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://live-space.ru ---Demo : http://demo.live-space.ru/index.php - Vulnerability -...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...

matpo bilder galerie 1.1 - Remote File Inclusion

matpo bilder galerie 1.1 - Remote File Inclusion +By CrackersChild+ Script.......: MatPo Bilder Galerie 1.1 Download.....: http://www.mapos-scripts.de/download,33.html Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File Ä°nclude...

WinZip <= 9.0 Multiple Unspecified Overflows

The remote host is using a version of WinZip that is prior to 9.0-SR1. It is, therefore, affected by several buffer overflow flaws that can allow an attacker to execute arbitrary code on the host by convincing a user to open a malformed archive file. C Tenable Network Security, Inc...

FreeBSD : subversion date parsing vulnerability (187)

The following package needs to be updated: subversion %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg5d36ef32a9cf11d89c6d0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

[Full-Disclosure] Cross-Site Scripting CuteNews

http://www.swp-zone.org/archivos/advisory-06.txt ------------------------------------------------------------------------------------------------- :.: Cross-Site Scripting CuteNews :.: PROGRAM: CuteNews HOMEPAGE: http://cutephp.com/ VERSION: v1.3.1 BUG: Cross-Site Scripting DATE: 23/05/2004 AUTHO...

CVE-2022-46222

...