Memory corruption

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-092...

Memory corruption

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka...

CVE-2018-0925

CVE-2018-0925 affects the ChakraCore scripting engine; it enables remote code execution through memory handling of objects. Root cause is memory corruption within ChakraCore’s object handling. The CVSSv3 base score is 7.5 (HIGH) with Network attack vector, HIGH impact on confidentiality, integrit...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0925

Upstream security update. Follow RHBA-2017-0925 for details...

CVE-2016-0925

Cross-site scripting XSS vulnerability in the Case Management application in EMC RSA Adaptive Authentication On-Premise before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or...

CVE-2016-0925

The CVE-2016-0925 entry describes a cross-site scripting (XSS) vulnerability in the Case Management component of EMC RSA Adaptive Authentication (On-Premise). Affected versions include 6.0.2.1.SP3.P4 HF210; 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50; and 7.2.x before 7.2.0.0.SP0.P0 HF20. The issu...

iPass Open Mobile Remote Code Execution Vulnerability - Windows

iPass Open Mobile is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IPass Control Pipe - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'IPass Control Pipe Remote Command Execution', 'Description' = %q This module exploits a vulnerability in the IPass Client service...

CVE-2015-0925

creationtimestamp| type| source ---|---|--- 2015-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36412 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ipasslaunchapp.rb 2018-05-29 15:50:33+00:00| seen|...

iPass Mobile Client Service Privilege Escalation

The named pipe, \IPEFSYSPCPIPE, can be accessed by normal users to interact with the iPass service. The service provides a LaunchAppSysMode command which allows to execute arbitrary commands as SYSTEM. This module requires Metasploit: https://metasploit.com/download Current source:...

IPass Control Pipe Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'IPass Control Pipe Remote Command Execution', 'Description' = %q This module exploits a vulnerability in the IPass Client service...

iPass Control Pipe Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the IPass Client service. This service provides a named pipe which can be accessed by the user group BUILTIN\Users. This pipe can be abused to force the service to load a DLL from a SMB share. This module requires Metasploit:...

CVE-2015-0925

CVE-2015-0925 affects iPass Open Mobile on Windows prior to 2.4.5. The issue allows remote authenticated users to execute arbitrary code by abusing a DLL pathname supplied as part of a crafted Unicode string that a subprocess reachable via a named pipe handles, demonstrated via a UNC share pathna...

CVE-2014-0925

CVE-2014-0925 affects IBM Sterling Control Center 5.4.0 prior to 5.4.0.1 iFix 3 and 5.4.1 prior to 5.4.1.0 iFix 2, where a crafted URL enables an open redirect by remote authenticated users. Impact is users being redirected to arbitrary sites, enabling phishing via legitimate-looking links. Explo...

FreeBSD : chromium -- multiple vulnerabilities (bdd48858-9656-11e2-a9a8-00262d5ed8ee)

Google Chrome Releases reports : 172342 High CVE-2013-0916: Use-after-free in Web Audio. Credit to Atte Kettunen of OUSPG. 180909 Low CVE-2013-0917: Out-of-bounds read in URL loader. Credit to Google Chrome Security Team Cris Neckar. 180555 Low CVE-2013-0918: Do not navigate dev tools upon drag a...

Google Chrome Multiple Vulnerabilities-01 April 2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01apr13win.nasl 6125 2017-05-15 09:03:42Z teissa $ Google Chrome Multiple Vulnerabilities-01 April 2013 Windows Authors: Arun Kallavi Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities-01 (Apr 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0925

CVE-2013-0925 affects Google Chrome (pre-26.0.1410.43). The issue: a Chrome extension can receive a URL without the extension having Tabs (APIPermission::kTab), implying a potential information leakage risk. The linked OpenVAS/NASL entries reiterate multiple Chrome vulnerabilities from Apr 2013 e...

CVE-2013-0925

Removed by vendor...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 26 to the Stable Channel. Chrome 26.0.1410.43 for Windows, Mac, Linux, and Chrome Frame contains number of new items including: "Ask Google for suggestions" spell checking feature improvements e.g. grammar and homonym checking Desktop...