48 matches found
CVE-2018-6178
CVE-2018-6178 is a UI spoofing vulnerability in Google Chrome/Chromium extensions. A crafted extension could elide or misrepresent UI in the DevTools/infobar flow, enabling a remote attacker to hide Chrome security UI. Affected product: Chromium/Chrome prior to 68.0.3440.75. Root cause: UI spoofi...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6178
Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Extension...
Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 8.0
Summary This bulletin describes a variety of minor security issues that have been found and fixed in WebSphere Service Registry and Repository version 8.0 Vulnerability Details CVE ID: CVE-2014-6153 DESCRIPTION: WSRR WEBUI ISSUES A COOKIE WHICH IS NOT DECLARED SSL ONLY. CVSS CVSS Base Score: 2.6...
CVE-2017-6178: from patch contrast-to-Exploit-vulnerability warning-the black bar safety net
Some time ago in the EDB poking around, saw a driver of a kernel Vulnerability, CVE-2017-6178, like me in learning the Kernel PWN the newbie Natural is not missed:, after debugging analysis after feeling learned a few things, so come and share with everyone. USBPcap is a USB packet capture tool,...
CVE-2012-6178
CVE-2012-6178 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2015-6178
CVE-2015-6178 is rejected/not used per initial description; it does not represent an active vulnerability entry.
CVE-2017-6178
The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference...
CVE-2017-6178
CVE-2017-6178 affects USBPcap 1.1.0.0, where IofCallDriver can be invoked with a crafted 0x00090028 IOCTL to trigger a NULL pointer dereference in the USBPcap driver (USBPcap.sys). This local condition enables privilege escalation as described in public disclosures; the core cause is an uninitial...
USBPcap 1.1.0.0 Privilege Escalation
/ Exploit Title - USBPcap Null Pointer Dereference Privilege Escalation Date - 07th March 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://desowin.org/usbpcap/ Tested Version - 1.1.0.0 USB Packet capture for Windows bundled with WireShark 2.2.5 Driver Version - 1.1.0.0 -...
USBPcap - Privilege Escalation Exploit
Exploit for windows platform in category local exploits / Exploit Title - USBPcap Null Pointer Dereference Privilege Escalation Date - 07th March 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://desowin.org/usbpcap/ Tested Version - 1.1.0.0 USB Packet capture for Windows...
USBPcap 1.1.0.0 (WireShark 2.2.5) - Local Privilege Escalation
USBPcap 1.1.0.0 WireShark 2.2.5 - Local Privilege Escalation / Exploit Title - USBPcap Null Pointer Dereference Privilege Escalation Date - 07th March 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://desowin.org/usbpcap/ Tested Version - 1.1.0.0 USB Packet capture for Windows...
USBPcap 1.1.0.0 (WireShark 2.2.5) - Local Privilege Escalation
/ Exploit Title - USBPcap Null Pointer Dereference Privilege Escalation Date - 07th March 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://desowin.org/usbpcap/ Tested Version - 1.1.0.0 USB Packet capture for Windows bundled with WireShark 2.2.5 Driver Version - 1.1.0.0 -...
CVE-2016-6178
Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote...
CVE-2016-6178
Summary: CVE-2016-6178 affects Huawei devices across several product lines (NE40E/CX600, PTN 6900-2-M8, NE5000E, CloudEngine 12800) with specific software levels prior to SP versions V800R007SPH017/019, V800R006SPH018, V100R003SPH010, and V100R005SPH006. A remote attacker with control plane acces...
Security Advisory - Input Validation Vulnerability in Multiple Huawei Products
There is an input validation vulnerability in Huawei multiple products, an attacker with control plane access may exploit this vulnerability by crafting a malformed packet. An exploit could allow the attacker to cause a Denial of Service or execute arbitrary code. Vulnerability ID:...