84 matches found
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Long Range ZIP vulnerabilities (USN-5840-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5840-1 advisory. It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an automated system were tricked int...
Ubuntu: Security Advisory (USN-5786-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5145-1] lrzip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2022 https://www.debian.org/security/faq -...
[SECURITY] [DLA 2981-1] lrzip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2981-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 13, 2022 https://wiki.debian.org/LTS -...
CVE-2020-5786
creationtimestamp| type| source ---|---|--- 2020-10-02 00:53:21+00:00| seen| https://t.me/cibsecurity/15004...
CVE-2020-5786
Cross-site request forgery in Teltonika firmware TRB2R00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...
CVE-2020-5786
CVE-2020-5786: A cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 lets a remote attacker trick authenticated users into performing sensitive application actions through a crafted link. The consolidated documents confirm the affected product/firmware version and the CSRF nature o...
@argdown/image-export (>=1.5.0, <=1.7.5), @automattic/wordpress-external-dependencies-plugin (1.0.0-alpha.0) +243 more potentially affected by CVE-2019-5786 via puppeteer (>=1.0.0, <=1.12.2)
puppeteer NPM version =1.0.0, =1.5.0, =0.190.0, =0.0.36, =0.0.1, =0.0.18, =0.0.1, =1.0.3, =1.3.4, =0.1.0, =0.0.10, =4.0.0-alpha.3, =8.0.1 and more Source cves: CVE-2019-5786 Source advisory: OSV:GHSA-C2GP-86P4-5935...
Oracle Linux 8 : grub2 (ELSA-2020-5786)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5786 advisory. - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072...
Exploit for Use After Free in Google Chrome
PoC exploit for CVE-2019-5786, a FileReader Use-After-Free UAF vulnerability in Chrome 72.0.3626.119 stable for Windows 7 x86. The exploit uses site-isolation to brute-force the vulnerability. The target is the FileReader object, which is used to read files from the local file system. The exploit...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
UBUNTU-CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
CVE-2019-5786 corresponds to a heap use-after-free in Google Chrome’s Blink layer affecting the FileReader API, enabling a remote attacker to potentially cause out-of-bounds memory access via a crafted HTML page. The CVE is documented as a vulnerability in Blink prior to 72.0.3626.121, with the v...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Google Chrome 72.0.3626.119 - 'FileReader' Use-After-Free (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chrome 72.0.3626.119 FileReader UaF exploit for Windows 7 x86', 'Description' = %q This exploit takes advantage of a use after free vulnerability...
Use-After-Free
Overview Versions of puppeteer prior to 1.13.0 are vulnerable to the Use-After-Free vulnerability in Chromium CVE-2019-5786. The Chromium FileReader API is vulnerable to Use-After-Free which may lead to Remote Code Execution. Recommendation Upgrade to version 1.13.0 or later. References - GitHub...