CVE-2016-5223

Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file...

Google Chrome Denial of Service Vulnerability (CNVD-2016-11965)

Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to cause a denial of service...

Google Chrome PDFium Local File Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A local file access vulnerability exists in PDFium in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to access...

Google Chrome Blink Cross-Site Scripting Vulnerability (CNVD-2016-12105)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A cross-site scripting vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit...

Google Chrome Blink Out-of-Bounds Write Vulnerability (CNVD-2016-12100)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker could exploit this...

UBUNTU-CVE-2016-9652

Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...

paypal.com XSS vulnerability

Vulnerable URL: https://www.paypal.com/signin/authorize?scope=openid+profile+email=uri=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTkJVR0JPVU5UWScpPC9zY3JpcHQ%2Btype=codeid=AU2xidf9T9eugG5k5N8mvY-ZSnU8wViF41BG0CRttRSsRK4MuJn2OM6PHgjU6N5FPWaKPJnKdOJwb9QL Details: Description| Value ---|---...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:1782-1)

ImageMagick was updated to fix 55 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...

cegbank.hu XSS vulnerability

Vulnerable URL: http://www.cegbank.hu/search.php?cat=234" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3489459 VIP website status:| No Check cegbank.hu SSL connection:| Grade: F...

like44.ru Open Redirect vulnerability

Vulnerable URL: http://like44.ru/away.php?to=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2343062 VIP website status:| No Check like44.ru S...

musicalads.co.uk XSS vulnerability

Vulnerable URL:...

mazandaran.parsonline.com XSS vulnerability

Vulnerable URL: http://mazandaran.parsonline.com/search/"autofocus+onfocus="alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

OpenSSLX509Certificate 反序列化漏洞

文章作者：没羽@阿里移动安全 来源: http://drops.wooyun.org/papers/10235 序 ---- 序列化 Serialization，是将对象的状态信息转换为可以存储或传输的形式的过程。在序列化期间，对象将其当前状态写入到临时或持久性存储区。使用者可以通过从存储区中读取或反序列化对象的状态，重新创建该对象。...

Threat Outbreak Alert RuleID7930: Email Messages Distributing Malicious Software on June 22, 2016

Medium Alert ID: 40728 First Published: 2015 August 31 13:44 GMT Last Updated: 2016 June 22 19:15 GMT Version: 55 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID7930 and...

Android 'Serialization' Vulnerability Affects 55 Percent of Devices

Google has patched a severe Android vulnerability that researchers at IBM said impacts more than 55 percent of devices. As with most Android vulnerabilities, users are reliant on handset makers and carriers to push patches downstream to devices, something they’ve not always been diligent about. I...

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/passwd - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...

VMSA-2014-0008 : VMware vSphere product updates to third-party libraries

a. vCenter Server Apache Struts Update The Apache Struts library is updated to address a security issue. This issue may lead to remote code execution after authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifier CVE-2014-0114 to this issue. b...

VMware ESXi product updates to third party libraries (VMSA-2014-0008)

VMware has updated vSphere third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Silentum Uploader 1.4.0 - Remote File Deletion Exploit

No description provided by source. Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we...

linux/x86 execve /bin/sh toupper() evasion 55 bytes

No description provided by source. / Linux/x86 toupper evasion, standard execve /bin/sh used eg. in various imapd exploits. Goes through a loop adding 0x20 to the /bin/sh -= 0x20 string ie. yields /bin/sh after addition. / include stdio.h char c0de = / main: / \xeb\x29 / jmp callz / / start: / \x...