Denial of Service Vulnerability in Eastland Technologies KGW3101 Serial Server

Beijing Eastland Technology Co., Ltd. is a company specializing in industrial Internet technology and industry. A denial of service vulnerability exists in the KGW3101 serial port server of Dongtu Technology, which can be exploited by an attacker to cause the web process of the device to restart...

Security Bulletin: Cross-Site Scripting vulnerability affects IBM Business Process Manager web Process Designer (CVE-2017-1494)

Summary IBM Business Process Manager web Process Designer is vulnerable to Cross-Site Scripting. Vulnerability Details CVEID: CVE-2017-1494 DESCRIPTION: IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We...

Fedora 26 : webkitgtk4 (2018-6a9fea1b3a)

This update addresses the following vulnerabilities : - CVE-2018-4200 Additional fixes : - Do TLS error checking on GTlsConnection::accept-certificate to finish the load earlier in case of errors. - Properly close the connection to the nested wayland compositor in the Web Process. - Avoid paintin...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0001

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0001

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

Fedora 24 : webkitgtk4 (2017-37f68e3534)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

Fedora 26 : webkitgtk4 (2017-772bf90b03)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix several crashes a...

Fedora 25 : webkitgtk4 (2017-bff1b87765)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

Fedora 24 : webkitgtk4 (2017-d317f6fb61)

This update addresses the following vulnerabilities : - CVE-2016-7656, CVE-2016-7635, CVE-2016-7654, CVE-2016-7639, CVE-2016-7645, CVE-2016-7652, CVE-2016-7641, CVE-2016-7632, CVE-2016-7599, CVE-2016-7592, CVE-2016-7589, CVE-2016-7623, CVE-2016-7586 Additional fixes : - Create GLX OpenGL contexts...

Fedora 25 : webkitgtk4 (2017-b015aa1d33)

This update addresses the following vulnerabilities : - CVE-2016-7656, CVE-2016-7635, CVE-2016-7654, CVE-2016-7639, CVE-2016-7645, CVE-2016-7652, CVE-2016-7641, CVE-2016-7632, CVE-2016-7599, CVE-2016-7592, CVE-2016-7589, CVE-2016-7623, CVE-2016-7586 Additional fixes : - Create GLX OpenGL contexts...

Fedora 23 : webkitgtk4 (2016-c1f4334ded)

This update addresses the following vulnerabilities : - CVE-2016-1857, CVE-2016-1856 Additional fixes : - Improved the detection of supported MIME types supported by the media player. - Fix web process crash when playing adaptive streaming media. - Change the volume while thumb slider is dragged,...

Fedora 24 : webkitgtk4 (2016-e46b75e5df)

This update addresses the following vulnerabilities : - CVE-2016-1857, CVE-2016-1856 Additional fixes : - Improved the detection of supported MIME types supported by the media player. - Fix web process crash when playing adaptive streaming media. - Change the volume while thumb slider is dragged,...

Safari 8.0.X / OS X Yosemite 10.10.3 - Crash Proof Of Concept

Exploit for macOS platform in category dos / poc !/usr/bin/php ?php Title : Safari 8.0.X / OS X Yosemite 10.10.3 Crash Proof Of Concept Product Website: https://www.apple.com/safari/ Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

Apple Mac OSX 10.10.3 (Yosemite) Safari 8.0.x - Crash (PoC)

Apple Mac OSX 10.10.3 Yosemite Safari 8.0.x - Crash PoC !/usr/bin/php ?php Title : Safari 8.0.X / OS X Yosemite 10.10.3 Crash Proof Of Concept Product Website: https://www.apple.com/safari/ Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

Apple Mac OSX 10.10.3 (Yosemite) Safari 8.0.x - Crash (PoC)

!/usr/bin/php ?php Title : Safari 8.0.X / OS X Yosemite 10.10.3 Crash Proof Of Concept Product Website: https://www.apple.com/safari/ Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter :...

mt-phpincgi Arbitrary PHP Code Execution Vulnerability

mt-phpincgi is a script that runs Movable Type templates. An arbitrary PHP code execution vulnerability exists in mt-phpincgi, which allows remote attackers to submit a special request to execute arbitrary PHP code in the context of a web process...

FlashChat <= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63921' ssvid version = '1.0' author = 'kikay' vulDate = '2006-09-06' createDate =...

MediaWiki 'IP'参数远程文件包含漏洞

BUGTRAQ: 9057 MediaWiki没有充分过滤用户提交的URI参数，远程攻击者可以利用这个漏洞包含远程服务器上的恶意文件，以WEB权限执行任意代码。 问题应该是对MediaWiki的'IP'参数缺少充分过滤，包含文件可被攻击者任意指令，如果指定远程服务器的恶意PHP文件，可导致以WEB进程权限执行。 MediaWiki-stable 20030829/20031107 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 修改php.ini配置文件，关闭'allowurlfopen'和'registerglobals'选项。 厂商补丁：...

Photo Graffix 3.4 Multiple Remote Vulnerabilities

No description provided by source. =-=-shell upload/local file-=-= -=-=-=-=-=-=-=-=-=-= script::Photo-GraffixV3.4.zip Author: ahmadbady =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://www.photo-graffix.com/V3/Photo-GraffixV3.4.zip...