6290 matches found
Madshi MadCodeHook Security Breach
Madshi MadCodeHook is a code base organized by Madshi to handle code compatibility between 32-bit and 64-bit Windows 2000 to Windows 10 systems. Madshi MadCodeHook before 2020-07-16 A security vulnerability exists that allows a local attacker to elevate their privileges on the system...
GHSA-H3GG-7WX2-CQ3H XSS in Flarum Sticky extension
Impact A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to be injected as HTML on the discussion list. The issue was discovered following an internal audit. Any HTML would be injected through Mithril's m.trust helper. This...
CVE-2021-21283
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to...
CVE-2021-21283
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to...
CVE-2021-21283 XSS in Flarum Sticky extension.
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to...
How Page Integrity Manager Detects Real-World Magecart Attacks
Written by Ziv Eli - Engineering Manager, Security and Maor Hod - Senior Product Manager, Security In this blog, we will take a look at and break down a recent Magecart attack detected and mitigated by Page Integrity Manager. The impacted customer operates a large international e-commerce busines...
Backdoor.Win32.Wollf.16 Hardcoded Password
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5f79b779acd4c9c75211835a2783bccb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.16 Vulnerability: Weak Hardcoded Password Description: Wollf.16 creates and run...
CVE-2020-4966
creationtimestamp| type| source ---|---|--- 2021-01-21 16:28:16+00:00| seen| https://t.me/cibsecurity/22490...
Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
The plugin did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page. PoC The PoC will be displayed on April 16, 2021, to give users the time to update...
CVE-2020-25533
creationtimestamp| type| source ---|---|--- 2021-01-16 00:51:26+00:00| seen| https://t.me/cibsecurity/22231...
CVE-2021-3162
creationtimestamp| type| source ---|---|--- 2021-01-16 00:51:21+00:00| seen| https://t.me/cibsecurity/22229...
OSV-2018-192 Stack-buffer-overflow in highbd_dr_prediction_z1_64xN_avx2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11517 Crash type: Stack-buffer-overflow READ 16 Crash state: highbddrpredictionz164xNavx2 av1highbddrpredictionz1avx2 av1predictintrablock...
FreeBSD : chromium -- multiple vulnerabilities (d153c4d2-50f8-11eb-8046-3065ec8fd3ec)
Chrome Releases reports : This release includes 16 security fixes, including : - 1148749 High CVE-2021-21106: Use after free in autofill. Reported by Weipeng Jiang @Krace from Codesafe Team of Legendsec at Qi'anxin Group on 2020-11-13 - 1153595 High CVE-2021-21107: Use after free in drag and drop...
Intel® RST Advisory
Summary: A potential security vulnerability in the Intel® Rapid Storage Technology RST may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14568 Description: Improper permissions in the executable...
CVE-2020-16033
creationtimestamp| type| source ---|---|--- 2021-01-08 22:42:16+00:00| seen| https://t.me/cibsecurity/21865...
Rust tiny_http crate 环境问题漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An environmental issue vulnerability exists in tinyhttp crate in versions of Mozilla Rust prior to 2020-06-16, which stems from an HTTP request smuggling can occur via a misformatted transport encoding header. N...
Code injection
In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...
CVE-2020-35133
creationtimestamp| type| source ---|---|--- 2020-12-16 20:41:52+00:00| seen| https://t.me/cibsecurity/20947...