4435 matches found
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities in the Google Chrome browser are caused by errors in the code. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or other adverse effects...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...
Hackers are using Nuclear Exploit Kit to Spread Cryptowall 4.0 Ransomware
Beware Internet Users! Cryptowall 4.0 – the newest version of the world's worst Ransomware – has surfaced in the Nuclear exploit kit, one of the most potent exploit kits available in the underground market for hacking into computers. Ransomware threat has emerged as one of the biggest threats to...
The vulnerability of the iOS operating system, which allows a hacker to track users
The vulnerability of the CFNetwork Cookies component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely track users...
CVE-2015-5831: Exposure of Sensitive Information to an Unauthorized Actor
NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...
Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF
The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor. PoC Create a file name...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...
Criminal Group Using Dynamic Gate System to Infect with Fiesta EK
A sophisticated criminal group operating for more than a year is utilizing a changing series of Internet protocol addresses, domains and gates in order to infect its victims with the Fiesta exploit kit. Fiesta is among the handful of exploit kits to have emerged in the wake of the once prominent...
Inside nls_933w.dll, the Equation APT Persistence Module
CANCUN – The names called out like beacons from the screen: Samsung; Seagate; Western Digital; Hitachi; Maxtor. Hardware makers were in the crosshairs of the Equation APT group and it was perhaps the worst possible scenario imagined by researchers looking at the frightening and extensive storehou...
CVE-2015-0922: Exposure of Sensitive Information to an Unauthorized Actor
McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password...
ShellShock DHCP Server
Added: 11/20/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background Bash is vulnerable to command injection using environment variables. When an application takes user input and uses setenv a malicious actor is able to execute commands on the target in the security context of the running...