PT-2022-27256 · Unknown · Watchtowerhq

Name of the Vulnerable Software and Affected Versions: WatchTowerHQ plugin versions prior to 3.6.16 Description: The issue is related to an Unauth. Arbitrary File Download vulnerability. This means that unauthorized users may be able to download arbitrary files, potentially leading to sensitive...

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability

Unauth. Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in the WordPress WatchTowerHQ plugin versions = 3.6.15. Solution Update the WordPress WatchTowerHQ plugin to the latest available version at least 3.6.16...

Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt2

3.6.16-alt2 built Aug. 11, 2022 Mikhail Efremov in task 304673 Aug. 2, 2022 Mikhail Efremov - Fix double free during gnutlspkcs7verify fixes: CVE-2022-2509...

Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt2

3.6.16-alt2 built Aug. 5, 2022 Mikhail Efremov in task 304672 Aug. 2, 2022 Mikhail Efremov - Fix double free during gnutlspkcs7verify fixes: CVE-2022-2509...

Mozilla Firefox 3.6.16 mChannel Use-After-Free漏洞

漏洞分析 此漏洞是由于Mozilla Firefox的xul.dll在处理mChannel标签时，在OnChannelRedirect中对mChannel对象进行创建，但在随后调用Release释放，在释放对象过后没有对该指针进行标记，从而导致在随后的调用用中引用mChannel标签时，由于指针已经被释放，导致call地址不可读，从而引发漏洞，下面对此漏洞进行详细分析。 首先打开PoC，火狐浏览器崩溃，附加调试器，到达漏洞现场。 858.85c: Access violation - code c0000005 first chance First chance exceptions a...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4201)

MozillaFirefox was updated to version 3.6.16 to fix the following security issue : MFSA 2011-11 Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mozilla Firefox 3.6.16 mChannel use after free vulnerability

Exploit for macOS platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::FF,...

Mozilla Firefox Integer Overflow

Title: Mozilla Firefox Array.reduceRight Integer Overflow Exploit Date: 12 Oct 2011 Author: Matteo Memelli ryujin -AT- offensive-security.com CVE-2011-2371 Full exploit package: http://www.exploit-db.com/sploits/17974.zip ff-i- Title: Mozilla Firefox Array.reduceRight Integer Overflow Exploit Dat...

Mozilla Firefox 3.6.16 mChannel Use After Free

$Id: mozillamchannel.rb 13507 2011-08-10 05:58:02Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mozilla Firefox 3.6.16 (Windows) - mChannel Use-After-Free (Metasploit) (1)

$Id: mozillamchannel.rb 13507 2011-08-10 05:58:02Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mandriva Linux Security Advisory : firefox (MDVSA-2011:068)

Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. Users on a compromised network could be directed to sites using the fraudulent certificates and mistake them for the legitimate sites. This could deceive them into revealing personal information...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4227)

Mozilla Firefox was updated to version 3.6.16 to fix the following security issue : - Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. MFSA 2011-11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora 13 : firefox-3.6.16-1.fc13 / galeon-2.0.7-39.fc13 / gnome-python2-extras-2.25.3-28.fc13 / etc (2011-3917)

Update to Firefox 3.6.16 and rebuilds of dependent packages. This erratum blacklists a small number of HTTPS certificates. BZ689430 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...