USN-2610-1: Oxide vulnerabilities

Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin Policy restrictions. CVE-2015-1253, CVE-2015-1254 A use-after-free was discovered in the...

CVE-2015-1254

CVE-2015-1254 affects Blink (core/dom/Document.cpp) used in Google Chrome before 43.0.2357.65. Root cause: inheritance of the designMode attribute, enabling a Same Origin Policy bypass via editing capabilities. Impact: cross-origin bypass potential in the DOM editing feature. Affected product lin...

FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)

Google Chrome Releases reports : 37 security fixes in this release, including : - 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. - 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. - 444927 High CVE-2015-1254: Cross-origin bypass in Editing...

CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2014-1254

Apple Type Services ATS in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Type 1 font that is embedded in a document...

CVE-2014-1254

CVE-2014-1254 (Apple Mac OS X ATS) : A memory‑corruption vulnerability in Apple Type Services (ATS) allows a remote attacker to trigger arbitrary code execution (or memory corruption leading to a DoS) by a crafted embedded Type 1 font in a document. Affected: OS X Mavericks 10.9 and 10.9.1 (and p...

CVE-2013-1254

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1254

CVE-2013-1254 is a Windows kernel-mode driver (win32k.sys) local privilege-escalation vulnerability. A race condition in win32k.sys allows a local attacker to gain elevated privileges and read arbitrary kernel memory locations. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)

This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows 'Win32k.sys' CVE-2013-1254 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

CVE-2012-1254

Cross-site scripting XSS vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1254

CVE-2012-1254 affects the Segue content management system (Segue 2.2.10.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public materials consistently describe an ability to exec...

CVE-2011-1254

The CVE-2011-1254 issue affects Microsoft Internet Explorer versions 6–8, caused by improper handling of in-memory objects (drag-and-drop memory corruption), enabling remote code execution when a crafted page accesses an uninitialized or deleted object. Related connected records describe addition...

Internet Explorer Handling Layout Memory Corruption (MS11-050; CVE-2011-1254)

A remote code execution vulnerability has been reported in the way that Microsoft IE accesses an object that has not been correctly initialized or has been deleted. Microsoft IE attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way tha...

MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

CVE-2010-1254

CVE-2010-1254 refers to an elevation-of-privilege issue affecting the Microsoft Open XML File Format Converter for Mac. During installation, the converter changes ACLs on the /Applications folder, reducing default security and potentially enabling an attacker with local access to replace the conv...

N'CMS Local File Inclusion

coded by ahmadbady //=========================================================================== // Topic : N'CMS Updated 2010-02-24 // Bug type : local file include // Download : http://sourceforge.net/projects/n-cms/files/N-CMS%20Equipe/n-cms-equipe-V1.1C-Debug.zip/download // Advisory :...

Uiga Proxy - Remote File Inclusion

Uiga Proxy - Remote File Inclusion coded by ahmadbady //=========================================================================== // Topic : uigaproxy // Bug type : remote file include // Advisory : //=========================================================================== // Author :...

MunkyScripts Simple Gallery - SQL Injection

coded by ahmadbady //=========================================================================== // Topic : MunkyScripts Simple Gallery // Bug type : SQL Injection Vulnerability // Advisory : //=========================================================================== // Author : ItSecTeam //...