9514 matches found
Microsoft Internet Explorer Multiple Vulnerabilities (3204059)
This host is missing a critical security update according to Microsoft Bulletin MS16-144. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Patches Publicly Disclosed IE, Edge Vulnerabilities
Microsoft today patched a half-dozen critical browser vulnerabilities that have been publicly disclosed, but apparently not used in attacks as of yet. The critical Internet Explorer and Microsoft Edge bulletins are among six released today, along with six others with a severity rating of importan...
GLSA-201612-35 : XStream: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201612-35 XStream: Remote execution of arbitrary code It was found that XStream would deserialize arbitrary user-supplied XML content, thus representing objects of any type. Impact : A remote attacker could pass a specially crafte...
MS16-152: Security update for Windows kernel: December 13, 2016
This security update resolves a vulnerability in Windows that could allow information disclosure when the Windows kernel improperly handles objects in memory. It addresses the vulnerability by correcting how the Windows kernel handles objects in memory.SummaryThe security update resolves a...
MS16-150: Security update for secure kernel mode: December 13, 2016
Resolves a vulnerability in Windows that could allow elevation of privilege when Windows Secure Kernel Mode improperly handles objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege when Windows Secure Kern...
MS16-153: Security update for Common Log File System driver: December 13, 2016
Resolves a vulnerability in Windows that could allow information disclosure when the Windows Common Log File System CLFS driver improperly handles objects in memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to bypass...
Fedora 25 : roundcubemail (2016-d361d188d9)
Version 1.2.3 - Searching in both contacts and groups when LDAP addressbook with groupfilters option is used - Fix vulnerability in handling of mail's 5th argument - Fix To: header encoding in mail sent with mail method 5475 - Fix flickering of header topline in min-mode 5426 - Fix bug where...
openSUSE Security Update : the Linux Kernel (openSUSE-2016-1410)
The openSUSE 13.1 kernel was updated to 3.12.67 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2013-5634: arch/arm/kvm/arm.c in the Linux kernel on the ARM platform, when KVM is used, allowed host OS users to cause a denial of service NULL pointer...
Fun hacks for faster content
A few weeks ago I was at Heathrow airport getting a bit of work done before a flight, and I noticed something odd about the performance of GitHub: It was quicker to open links in a new window than simply click them. Here's a video I took at the time: GitHub link click vs new tab Here I click a...
Debian DLA-733-1 : openafs security update
It was discovered that there was an information leak vulnerability in openafs, a distributed filesystem. Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain 'dead' directory entry information. For Debian 7 'Wheezy', this issue has been...
Hand to hand teach you how to construct the office exploits EXP（fourth period）-bug warning-the black bar safety net
This is a period of vulnerability to share with you is CVE-2015-1641 learning summary, this vulnerability due to its good versatility and stability claims to have replaced the CVE-2012-0158 trend. The vulnerability is a type confusion class of vulnerability, through which you can achieve arbitrar...
BitUnmap: Attacking Android Ashmem
Posted by Gal Beniamini, Project Zero The law of leaky abstractions states that “all non-trivial abstractions, to some degree, are leaky”. In this blog post we’ll explore the ashmem shared memory interface provided by Android and see how false assumptions about its internal operation can result i...
Microsoft Internet Explorer 11 MSHTML - CGeneratedContent::HasGeneratedSVGMarker
Exploit for windows platform in category dos / poc window.onload = function document.getElementsByTagName"iframe"0.src = "repro-iframe.html"; Description Internally MSIE uses various lists of linked CTreePos objects to represent the DOM tree. For HTML/SVG elements a CTreeNode element is...
CentOS 7 : squid (CESA-2016:2600)
An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Microsoft Internet Explorer 11 - MSHTML CGeneratedContent::HasGeneratedSVGMarker Type Confusion
Microsoft Internet Explorer 11 - MSHTML CGeneratedContent::HasGeneratedSVGMarker Type Confusion window.onload = function document.getElementsByTagName"iframe"0.src = "repro-iframe.html"; Description Internally MSIE uses various lists of linked CTreePos objects to represent the DOM tree. F...
CentOS 7 : 389-ds-base (CESA-2016:2594)
"An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Microsoft Internet Explorer 11 - MSHTML 'CGeneratedContent::HasGeneratedSVGMarker' Type Confusion
window.onload = function document.getElementsByTagName"iframe"0.src = "repro-iframe.html"; Description Internally MSIE uses various lists of linked CTreePos objects to represent the DOM tree. For HTML/SVG elements a CTreeNode element is created, which embeds two CTreePos instances: one tha...
Microsoft Internet Explorer 11 MSHTML CGeneratedContent::HasGeneratedSVGMarker Type Confusion
Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the eighteenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these throu...
Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20161115)
Security Fixes : - It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information. CVE-2016-5416 - An information disclosure flaw was found in 389 Director...
CentOS 6 : 389-ds-base (CESA-2016:2765)
"An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...