Weblate: DNSSEC Zone Walk using NSEC Records

Due to a design flaw in the NSEC records used by DNSSEC it is possible to discover all subdomains of a particular domain for which NSEC records are available. NSEC records are used by the weblate.org domain which means anyone can retreive all subdomains of weblate.org. These subdomains can contai...

Code injection

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

PT-2017-16763

Name of the Vulnerable Software and Affected Versions AMD processors affected versions not specified Description The issue concerns modern AMD processors, where page table walks conducted by the Memory Management Unit MMU during virtual to physical address translation can leave a trace in the las...

walk-ins.info XSS vulnerability

Vulnerable URL: http://walk-ins.info/cityjobs.asp?findloc=Pune%22%3E%22%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Microsoft Edge - JSON.parse Info Leak Vulnerability

Exploit for windows platform in category dos / poc var once = false; var a = 1; function f if!once a = new Array1, 2, 3; this2 = a; once = true; //alert"f " + this; return ; JSON.parse"1, 2, 4, 5", f; var n = new Numbera0; n = n 1; var s = n.toString16; n = new Numbera1; n = n 1; s = s +...

PT-2016-3448 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue was found in the netlink dump function. This occurs when the Netlink socket receives a message of type XFRM MSG GETSA or XFRM MSG GETPOLICY with the DU...

FreeBSD : xen-kernel -- x86 software guest page walk PS bit handling flaw (e43b210a-4212-11e6-942d-bc5ff45d0f28)

The Xen Project reports : The Page Size PS page table entry bit exists at all page table levels other than L1. Its meaning is reserved in L4, and conditionally reserved in L3 and L2 depending on hardware capabilities. The software page table walker in the hypervisor, however, so far ignored that...

PT-2016-5972

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description The issue arises from the guest walk tables function in arch/x86/mm/guest walk.c, which does not properly handle the Page Size PS page table entry bit at the L4 and L3 page table levels. This could...

Solar Walk Free - Planets - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solar Walk Free - Planets published at the 'play' market has multiple vulnerabilities...

Noom Walk Pedometer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Noom Walk Pedometer published at the 'play' market has multiple vulnerabilities...

Walk Band - Multitracks Music - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Walk Band - Multitracks Music published at the 'play' market has multiple vulnerabilities...

VR Space Walk - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application VR Space Walk published at the 'play' market has multiple vulnerabilities...

Walk-A-Funghi - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Walk-A-Funghi published at the 'play' market has multiple vulnerabilities...

PT-2014-8619

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17.3 Description The issue is related to the d walk function in fs/dcache.c, which does not properly maintain the semantics of rename lock. This allows local users to cause a denial of service, resulting in a...

CVE-2014-5982: Undefined Security Weakness

The RunKeeper - GPS Track Run Walk aka com.fitnesskeeper.runkeeper.pro application 4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9679)

This update for net-snmp fixes a remote denial of service problem inside snmptrapd when it is started with the '-OQ' option. CVE-2014-3565, bnc894361 Additionally, a timeout issue during SNMP MIB walk on OID 1.3.6.1.2.1.4.24 when using newer v5.5+ versions of snmpwalk has been fixed. bnc865222...

kernel security and bug fix update

2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...

CVE-2014-4573

Multiple cross-site scripting XSS vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 o parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 o parameter...

CVE-2014-4573

CVE-2014-4573 affects the Frame Maker component (frame-maker.php) of the WordPress Walk Score plugin 0.5.5 and earlier, with XSS vulnerabilities exploitable via the s or o parameter. The impact is remote injection of arbitrary web script or HTML. Affected plugin versions and vulnerable parameter ...