EasyCom SQL iPlug suffers from a denial of service vulnerability.
8ff75e06d54c1f35232927de23ac06daeac3c8d54ef6bc21733440e1e028b5d8
The EasyCom AS400 (iBMI) PHP API suffers from a buffer overflow vulnerability.
6124ed975805675e778436a46121a105d3b644ada5197bdb2d1bbaead544dc13
tnef versions 1.4.12 and below suffer from multiple integer overflows, type confusions, and out of bounds read and write vulnerabilities.
5705b80ef5130f182eaa09743b3b19d2e17761e1bcc5443fc91394d3bdbe51e3
Air Transfer versions 1.2.1 and 1.0.14 suffer from multiple cross site scripting vulnerabilities.
4ff3c672752680320d8532a572df100ca60629e149d24ca58f7ba062128a5672
This bulletin summary lists one released Microsoft security bulletin for February, 2017.
c10fca7550173686a11a883eb6930a23f50785d3d78916bad5ddf4bdd62390bc
The Norcon Redux Call For Papers has been announced. It will take place in Chico, California.
14e8aefe803297258549025a0c93e5786540f68feb58f01e54aa1465566cb400
Travel Portal Script version 9.37 suffers from cross site scripting and remote SQL injection vulnerabilities.
7c0a15a3895f367ee356e75fb018aa1102c9b134758f5cd9478c60e258c9a3cd
Apple Security Advisory 2017-02-21-2 - Logic Pro X 10.3.1 is now available and addresses a memory corruption vulnerability.
3eed75a7242320f6481a22179eaefd954c54322d7a2947a90ddbefa68b2f94a4
Apple Security Advisory 2017-02-21-1 - GarageBand 10.1.6 is now available and addresses a memory corruption issue.
1a5a8e755756dda1db45dd85aee82fc3cf7d4f874e1f54dad06b2fd61d006d03
This Metasploit module exploits a remote command execution vulnerability in the Sonicwall SRA Appliance versions 8.1.0.2-14sv and below. The vulnerability exists in a section of the machine's administrative interface for performing configurations related to on-connect scripts to be launched for users connecting.
ee018dd39831a98879da701a3b32d457caca08abf9e8f7998865190e3fb7e893
This Metasploit module exploits a remote command execution vulnerability in the Sonicwall SRA Appliance versions 8.1.0.2-14sv and below. The vulnerability exists in a section of the machine's administrative interface for performing configurations related to on-connect scripts to be launched for users connecting.
e5debce7ddf1f32b39ab4ebafe3798788f7bac257c170fec0012a53ab9729588
Cloudflare has reverse proxies that are dumping uninitialized memory.
66511f241de1d3b330ddbb6ca920b62835261e611a2fa6e9a5e1f26923a423df
Apple WebKit suffers from a UXSS via Frame::setDocument.
5104194e03e417e5667c9b4e888d0c95f77d92b2d00a9053243150deb4f64f54
AppleWebKit suffers from a bypass in the pop-up blocker via a cross-origin or sandboxed iframe.
d457da214a1cf7f501ec9edc89ee54671857a33c838ee0dd2b0b469664bd1774
Apple WebKit suffers from a UXSS via FrameLoader::clear.
96dd616ca7980d96ce88b9b1c9eb294dcbfae7e91426263f14063998f9dbbfaf
Cross site scripting on macOS HelpViewer leads to arbitrary file execution and arbitrary file read.
60ac6dfc903acc3a29b78f58ebfa4282a803cce1341a5844a4a5edfbfd88a659
Google Chrome suffers from an out-of-bounds read in layout.
2d3757be67305e873ee9adecfd5373daa82c75610751deda2131394581490717
Microsoft Edge and Internet Explorer suffer from a type confusion in HandleColumnBreakOnColumnSpanningElement.
acb3a39defa5f6c4a6541be344f794bfefad5affcf45b6f3a062c6bf6cbb9b2b
Android suffers from an arbitrary class loading and instantiation in the protobuf parcelable "javanano" compiler.
00694c6c42772d03fbe9189fb1b29c2886a2b4bc8a3b53aeaadae66fb7532591
38 bytes small Linux x86-64 egghunter shellcode.
33a8836e8a3a2bb2786d5204de9376fab193195fc37069f045d2398e5c936c77
WordPress Mail Masta plugin version 1.0 suffers from a remote SQL injection vulnerability.
7435bc6744e9bd69c9761bcb6ab621a067018103534512777e5dc3959b909a40
MBLS Flex CMS version 0.7.2 suffers from remote SQL injection and cross site scripting vulnerabilities.
de8bbf8970714b308b02a1c4bb5001ad45d1ad6812f661ed24075e53393fe863
This Metasploit module exploits a remote command execution vulnerability in the Sophos Web Appliance versions 4.2.1.3 and below. The vulnerability exists in a section of the machine's administrative interface for performing diagnostic network tests with wget and unsanitized user supplied information.
7db483f4c13c510be0772b6ca810c42aab21ae2d4566ceb664f88a68ec7e033c
ProjectSend r754 suffers from authentication bypass and insecure direct object reference vulnerabilities.
e576cd52b59276cce9f4867d9fc7b1432eb74feb9c066efecd24c54f3ae44bf5
Lock Photos Album and Videos Safe version 4.3 suffers from a directory traversal vulnerability.
030e45eb2a4547c1026ac012430e5158bfa001dc92b0f82caf3acd206c8d56b3