kreslashop.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8505 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting kreslashop.ru website and its users. Following coordinated...

CVE-2019-8505

CVE-2019-8505 affects Apple’s Safari Reader feature. The issue is a logic/validation problem in Safari Reader that can be triggered when loading a maliciously crafted webpage, enabling universal cross‑site scripting. Affected products are iOS and Safari; the vulnerability is addressed by the Appl...

About the security content of Safari 12.1

About the security content of Safari 12.1 This document describes the security content of Safari 12.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2018-8505

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8510,...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

CVE-2018-8505

Technical details for CVE-2018-8505 are not publicly provided in the connected documents. The entries reference Chakra/Core vulnerabilities in general but do not specify affected products, versions, root cause, impact, or fixes. Monitor for official updates.

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8505)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2016-8505

Vulnerability summary (CVE-2016-8505) : A cross-site scripting flaw in Yandex Browser for desktop, specifically in BookReader, affects versions prior to 16.6. A remote attacker could execute arbitrary JavaScript in the context of BookReader. The issue is tied to the BookReader component of Yandex...

Memory corruption

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507...

CVE-2015-8505

Summary (concrete details from provided sources): Android mediaserver in versions prior to 5.1.1 LMY48Z is vulnerable to a memory corruption issue that can be triggered by a crafted media file, enabling remote code execution or a denial of service. The entry is part of CVE-2015-8505 and is linked...

Etiko CMS index.php cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Affected system: Etiko Etiko CMS Description: CVECAN ID: CVE-2 0 1 4-8 5 0 5 Etiko CMS is a content management system. Etiko CMS did not effectively verify the index. php script input, in the realization on the presence of cross-site scripting vulnerability, a remote attacker with the structure o...

CVE-2014-8505

Etiko CMS is affected by multiple XSS vulnerabilities (CVE-2014-8505). The issues allow remote attackers to inject arbitrary script/HTML via the page_id parameter to loja/index.php or the article_id parameter to index.php. Affected software: Etiko CMS (components/pages loja/index.php and index.ph...