Avaya OfficeScan (IPO) Remote ActiveX Buffer Overflow Exploit

Exploit for windows platform in category dos / poc + Credits: John Page aka hyp3rlinx Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO v9.1.0 - 10.1 IP Office is Avaya's global midsize solution for enterprises, supporting up to 3,000 users at a single location with IP...

eaglereg.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-363946 Description| Value ---|--- Affected Website:| eaglereg.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Mozilla Firefox 55 - Denial of Service

Mozilla Firefox 55 - Denial of Service Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/...

Adobe Flash Player Infinite Recursion Arbitrary Read Access Violation(CVE-2016-4132)

SUMMARY A potentially exploitable read access violation vulnerability exists in the a way Adobe Flash Player handles infinitely recursive calls. A specially crafted ActionScript code can cause a read access violation which can potentially be further abused. To trriger this vulnerability user...

Mozilla Firefox Username Denial Of Service

Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/ Mozilla Foundation Security Advisory:...

How to debug icon cannot be displayed in storefront webpage

This article describes how to debug the issue of icon not be displayed in storefront web page...

Pydio Core < 6.0.7 Multiple Vulnerabilities

Pydio Core is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pydio:pydio"; if description...

oclc.org XSS vulnerability

Vulnerable URL: http://www.oclc.org/en//search-results.html?output=xmlnodtd=utf8=utf8=0=marketingen"'--!confirmOPENBUGBOUNTY...

CVE-2017-8695

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016;...

PT-2017-18480

Name of the Vulnerable Software and Affected Versions Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows Uniscribe in Microsoft Windows 7 SP1 Windows Uniscribe in Microsoft Windows 8.1 Windows Uniscribe in Microsoft Windows Server 2012 Gold and R2 Windows Uniscribe in...

Google Chrome heap buffer overflow vulnerability (CNVD-2017-31821)

Google Chrome is an open source web browser. Google Chrome WebGL suffers from a heap buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special WEB page, tricking the user into parsing it, and executing arbitrary code...

Google Chrome memory misreference vulnerability (CNVD-2017-31820)

Google Chrome is an open source web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability by submitting a special WEB page and tricking users into parsing it to execute arbitrary code...

UBUNTU-CVE-2015-8079

qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...

Remote code execution

By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz...

MGASA-2017-0285 Updated fossil package fixes security vulnerability

Potential XSS vulnerability on the /help webpage boo1053267...

Updated fossil package fixes security vulnerability

Potential XSS vulnerability on the /help webpage boo1053267...

More on My LinkedIn Account

I have successfully gotten the fake LinkedIn account in my name deleted. To prevent someone from doing this again, I signed up for LinkedIn. This is my first -- and only -- post on that account: My Only LinkedIn Post Yes, Really Welcome to my LinkedIn page. It looks empty because I'm never here. ...

WordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting Vulnerability

WordPress GamePlan Event and Gym Fitness theme versions 1.0 through 1.5.13.2 suffer from a cross site scripting vulnerability. Exploit Title: GamePlan Event and Gym Fitness WordPress Theme - Reflected XSS v1.0 - v1.5.13.2 Date: August 4, 2017 Software Link:...

code49.com.py XSS vulnerability

Vulnerable URL: https://www.code49.com.py/paginas-web-inmobiliarias-en-paraguay.php?page=1%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13428630 VIP website status:...

WebKit Safari iOS iTunes Privilege Escalation

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...