Security fix for the ALT Linux 7 package libssh version 0.7.6-alt1.M70P.1

0.7.6-alt1.M70P.1 built Oct. 22, 2018 Sergey Y. Afonin in task 215330 Oct. 20, 2018 Sergey Y. Afonin - new version - security fix: CVE-2018-10933...

Google PDFium JBIG2 image ComposeToOpt2WithRect information disclosure vulnerability

Summary An exploitable out-of-bounds read on the heap vulnerability exists in the JBIG2 parsing code of Google Chrome version 67.0.3396.99. A specially crafted PDF document can trigger an out-of-bounds read, which can possibly lead to an information leak that could be used as part of an exploit. ...

Y Combinator: Stored Cross Site Scripting

XSS was disclosed and was forwarded to our software team. A member of the software team fixed fairly quickly and we confirmed no data was exposed...

PT-2018-10747 · Lutron · Stanza Lutron Integration Protocol

Name of the Vulnerable Software and Affected Versions: Stanza Lutron integration protocol versions Revision M through Revision Y Description: The issue allows attackers to gain total super user control of an IoT device through a TELNET session. This is made possible by default and unremovable...

PT-2018-10714 · Lutron · Homeworks Qs

Name of the Vulnerable Software and Affected Versions: HomeWorks QS Lutron integration protocol versions Revision M through Revision Y Description: The issue allows attackers to gain total super user control of an IoT device through a TELNET session. Default and unremovable support credentials ar...

PT-2018-10746 · Lutron · Lutron Radiora 2

Name of the Vulnerable Software and Affected Versions: Lutron RadioRA 2 versions Revision M through Revision Y Description: The issue allows attackers to gain total super user control of an IoT device through a TELNET session. Default and unremovable support credentials are used, with the usernam...

CVE-2018-9954

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

y-not.co.il XSS vulnerability

Open Bug Bounty ID: OBB-581894 Description| Value ---|--- Affected Website:| y-not.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

VulnCheck KEV: CVE-2014-7187

Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via deeply nested for loops, aka the "wordlineno" issue...

y-r.by XSS vulnerability

Open Bug Bounty ID: OBB-570172 Description| Value ---|--- Affected Website:| y-r.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

XSS vulnerability in old y article management system

The old y article management system is based on the old y Asp Access/Mssql environment developed under the open source website building products . Old y article management system XSS vulnerability , an attacker can use the vulnerability in the member control panel to insert malicious code , and...

Security fix for the ALT Linux 8 package clamav version 0.99.3-alt1

0.99.3-alt1 built Jan. 30, 2018 Sergey Y. Afonin in task 198652 Jan. 28, 2018 Sergey Y. Afonin - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

Security fix for the ALT Linux 10 package clamav version 0.99.3-alt1

Jan. 28, 2018 Sergey Y. Afonin 0.99.3-alt1 - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

CVE-2014-3223

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches...

Code injection

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches...

CVE-2014-3223

CVE-2014-3223 affects Huawei S9300 (pre-V100R006SPH013) and S2300/S3300/S5300/S6300 (pre-V100R006SPH010) switches, due to a Y.1731 processing flaw that can cause a reboot. The issue is tied to Huawei’s Y.1731 vulnerability (HWPSIRT-2013-1165) and is documented across multiple sources (NVD, CVE li...

CVE-2014-3223

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches...

CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...

CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...

Hexchat IRC Client 2.11.0 - Directory Traversal

!/usr/bin/python Meta information Exploit Title: Hexchat IRC client - Server name log directory traversal Date: 2016-01-26 Exploit Author: PizzaHatHacker Vendor Homepage: https://hexchat.github.io/index.html Software Link: https://hexchat.github.io/downloads.html Version: 2.11.0 Tested on: HexCha...