9219 matches found
CVE-2017-6451
The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...
SambaCry, the Seven Year Old Samba Vulnerability, is the Next Big Threat (for now)
As Samba is used as part of many organizations storage systems, we will discuss the impact of the vulnerability on organizations and home users...
accghana.com XSS vulnerability
Open Bug Bounty ID: OBB-219811 Description| Value ---|--- Affected Website:| accghana.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware
PoC misc PoC - Internet of InSecurity Things Well worth to...
isg.fr XSS vulnerability
Open Bug Bounty ID: OBB-217303 Description| Value ---|--- Affected Website:| isg.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
minilex.de XSS vulnerability
Open Bug Bounty ID: OBB-216413 Description| Value ---|--- Affected Website:| minilex.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
UBUNTU-CVE-2016-9827
The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...
b2evolution directory traversal vulnerability (CNVD-2017-01294)
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. b2evolution suffers from a directory traversal vulnerability that stems from an incomplete fix for the directory traversal vulnerability CVE-2017-5480 patch. An attacker via ... / can bypass...
prediger-katechet.de XSS vulnerability
Open Bug Bounty ID: OBB-208207 Description| Value ---|--- Affected Website:| prediger-katechet.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ne-mo.org XSS vulnerability
Open Bug Bounty ID: OBB-208073 Description| Value ---|--- Affected Website:| ne-mo.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bats.org.uk XSS vulnerability
Open Bug Bounty ID: OBB-204492 Description| Value ---|--- Affected Website:| bats.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Bitcoin Price Jumps Above $1150 — Highest in last 3 Years
What a good start of the New Year for those holding Bitcoins! Web-based digital currency Bitcoin has passed $1,110 for the first time on the Bitstamp Price Index BPI since early November 2013. Bitcoin broke the barrier on 1 January and now is trading above $1,150 mark at the time of writing,...
aquascapesofconnecticut.com XSS vulnerability
Open Bug Bounty ID: OBB-201809 Description| Value ---|--- Affected Website:| aquascapesofconnecticut.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
the-dispatch.com XSS vulnerability
Open Bug Bounty ID: OBB-200001 Description| Value ---|--- Affected Website:| the-dispatch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-7262
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature...
BELL-CVE-2016-7942 CVE-2016-7942 does not affect BellSoft software
Bulletin has no description...
Command Execution Vulnerability in Call Center System Year Parameter of Tibus Communications
The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A command execution vulnerability exists in the year parameter of the Setset Time Communication Call Center System. The vulnerability file: /sysmaint/settime.php allows...
Wordpress new-year-firework plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. new-year-firework is one of the plug-ins for creating new campaigns. A cross-site scripting vulnerabilit...
