4302 matches found
Android Data Compromise
The vulnerability of the Ultimate Edition software for the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through specially crafte...
Divide Between Work, Personal Data on Android Breached
SAN FRANCISCO–Researchers here at the RSA Conference demonstrated Thursday a way a hacker can bypass enterprise mobility management sandboxing tools known as Android for Work that are designed to segregate work and personal data on Android devices. In a proof-of-concept demonstration, researchers...
CVE-2017-2622
An accessibility flaw was found in the OpenStack Workflow mistral service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information...
Oracle Fusion Middleware Core Component Data Compromise
The vulnerability of Oracle Fusion Middleware’s core components is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Libraries Component Data Compromise
The vulnerability of the Libraries component of the Java Platform software platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected information...
Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled
Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo firstChild; The function expects that the first child is going to be of type...
Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled Exploit
Exploit for multiple platform in category dos / poc function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo firstChild; The function expects that the first child is going to be of type RenderBox, but in...
Apple WebKit Renderbox Type Confusion
Apple WebKit: Type confusion in RenderBox with accessibility enabled CVE-2017-2373 There is a type confusion vulnerability that affects WebKit with accessibility enabled WebCore::AXObjectCache::gAccessibilityEnabed. PoC: =============================== function boom...
Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled
function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo firstChild; The function expects that the first child is going to be of type RenderBox, but in the PoC it is actually of type RenderText. This was...
QEMU Hardware Emulation Data Compromise
The vulnerability of the Virtio GPU emulation software in QEMU is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a local attacker to compromise data confidentiality, integrity, and accessibility...
QEMU Hardware Emulation Data Compromise
The vulnerability of the QEMU hardware emulation emulator’s USB redirector is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a local attacker to compromise data confidentiality, integrity, and accessibility by destroying the ‘usbredirhandledestroy’ USB...
WordPress Cross-Site Request Forgery Vulnerability (CNVD-2017-00613)
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the widget-editingaccessibility-mode feature in WordPres...
CVE-2017-5492
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
DEBIAN-CVE-2017-5492
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
CVE-2017-5492
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
CVE-2017-5492
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
CVE-2017-5492
Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...
PT-2017-16533
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.1 Description A cross-site request forgery CSRF issue exists in the widget-editing accessibility-mode feature, allowing remote attackers to hijack the authentication of victims for requests that perform a...
