Mail.ru: Stored XSS in e.mail.ru (payload affect multiple users)

Hi, We have found a high risk level STORED XSS in e.mail.ru chat, the status change function allow to inject malicious payload in javascript & HTML, The attack affect multiple users and run in auto mode, no need a user interaction. Vulnerability affect any user that have been invited to your chat...

McAfee VirusScan Enterprise Data Access Compromise

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data accessibility...

March 14, 2017—KB4013198 (OS Build 10586.839)

None None...

PT-2017-4010

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.1 Firefox ESR versions prior to 52.1 Firefox ESR versions prior to 45.9 Firefox versions prior to 53 Description The issue arises during DOM manipulations of the accessibility tree through script, causing the D...

iOS Information Disclosure

The vulnerability of the iOS operating system’s accessibility component is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting locally, to access protected information about photos and contacts by leveraging the additional accessibility...

iOS DoS

The vulnerability of the iOS operating system’s accessibility component is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to cause service failures or otherwise affect the system...

Do we need a new heading element? We don't know

There's a proposal to add a new element to the HTML spec. It solves a fairly common use-case. Take this HTML snippet: Do you find the "plot" a distraction in movies? If so, you should check out "John Wick" - satisfaction guaranteed! This could be a web component, or a simple include. The problem...

CVE-2016-7664

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

CVE-2016-7634

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible...

CVE-2016-7634

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible...

Code injection

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

CVE-2016-7634

CVE-2016-7634 affects iOS prior to 10.2 in the Accessibility component. The vulnerability allows a nearby user to overhear spoken passwords because the system could disclose passwords spoken by VoiceOver/Accessibility without considering they are locally audible. Apple’s patch for iOS 10.2 disabl...

CVE-2016-7664

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

CVE-2016-7664

CVE-2016-7664 affects iOS prior to 10.2 in the Accessibility component. A physically present attacker could access photos and contacts from the lock screen by exploiting excessive options on the locked device. The issue was addressed in iOS 10.2 (update/patch available), with Apple reporting that...

CVE-2016-7634

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible...

PT-2017-1334

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 Description The issue is related to the Accessibility component of the iOS operating system, which lacks protection of service data. This allows a local attacker to obtain sensitive information about photos and...

CVE-2016-7664: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

PT-2017-1292

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 Description The issue involves the Accessibility component, which accepts spoken passwords without considering that they are locally audible. This could potentially allow a local attacker to cause a denial of service...

CVE-2016-7634: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible...