6506 matches found
mozilla -- multiple vulnerabilities
Mozilla Foundation reports: CVE-2017-7793: Use-after-free with Fetch API CVE-2017-7817: Firefox for Android address bar spoofing through fullscreen mode CVE-2017-7818: Use-after-free during ARIA array manipulation CVE-2017-7819: Use-after-free while resizing images in design mode CVE-2017-7824:...
Revealing the content of the address bar (IE)
Revealing the content of the address bar IE Hello fellow bug hunter! Today we are going back to Internet Explorer which despite getting old, tons people still use it. I am much happier with MSRC lately, they are really moving forward regarding Edge, design bugs, and they even extended its bug...
buyersguide.americanbar.org XSS vulnerability
Vulnerable URL: http://buyersguide.americanbar.org/svcore/full.html?bg="FFFFFF=/offices/image-gallery-xml/7609=http://buyersguide.americanbar.org/sites/centerbase/7609/images/=http://buyersguide.americanbar.org/sites/centerbase/7609/images/=true=true=false=true=true=true=-1 Details: Description|...
Apple iOS Safari Address Bar Forgery Vulnerability
Apple iOS and Safari are products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari is one of the specialized components used in the Safari browser. A...
Apple Safari Address Bar Forgery Vulnerability
Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...
iOS 11 Update includes Patches for Eight Vulnerabilities
iOS 11 is out today and along with a new look and feel on the iPad especially comes a handful of patches for the Apple mobile OS. Apple addressed eight CVEs in today’s iOS update, and 15 overall as it also updated Safari and the Xcode development framework. Two Webkit bugs, CVE-2017-7106 and...
CVE-2015-3299
Cross-site scripting XSS vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order...
CVE-2015-3299
CVE-2015-3299 refers to a Cross-site Scripting (XSS) vulnerability in the WordPress plugin Floating Social Bar, affected versions prior to 1.1.7. The issue allows remote attackers to inject arbitrary script/HTML via vectors related to the original service order. Impact is consistent with a user-f...
About the security content of Safari 11
About the security content of Safari 11 This document describes the security content of Safari 11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Android Message APP denial of service ddos vulnerability flaws bug(CVE-2017-0780)the use of the research-vulnerability warning-the black bar safety net
0×01 flaws vulnerabilities in the bug description 9 on 7, Trend Micro announced a review of the CVE-2017-0780: rebuff-do flaws vulnerability bug can be incurred Android Message App the collapse of the articles. This morning had confirmed that the flaws vulnerabilities bug on the latest version of...
Struts2 new flaws vulnerability bug（S2-052 presents the use case, and face the vulnerability flaws of the enterprise-the race against time-vulnerability warning-the black bar safety net
Prior to the black bar safety net it S2-052）vulnerabilities done in a special thematic report, I believe we also have understand! Recently from the Cisco Talos experimental study of the analysis chamber and NVISO laboratory for the research staff also found that there was an attacker of real use ...
Samsung, Huawei and other phone Bootloader was traced to the presence of many high-risk bug-vulnerability warning-the black bar safety net
California University research team to create the main stream mobile platform in the bootloader exists in the code test and the DOS of the security gap. Workshop staff with a BootStomp to create 6 new found cracks, 5 of which division is the manufacturer to confirm. There is also a su XI reported...
CVE-2015-3161
The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape tags in string literals when producing JSON...
Code injection
The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape tags in string literals when producing JSON...
Oracle Java and the Apache Xerces PDF/Docx Server DDOS vulnerability-vulnerability warning-the black bar safety net
One, flaws summary Oracle Java JDK/JRE（1.8.0.131 and earlier versions of the package and the Apache Xerces（2.11.0 version, there are two flaws, two flaws were: The Oracle JDK/JRE and-rebuff-do（DoS）flaws java. net. URLConnection not apply setConnectTimeout when and-rebuff-do. Oracle has received t...
About the security content of Safari 10.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Win + G Pop Up Citrix Receiver Launching Apps/Desktops
When launching published apps or desktops from a Windows 10 OS a green popup windows briefly appears prompting to press Win + G for the game bar or for the search bar...
“The seismic network of the third generation”（CVE-2017-8464 several species using the method and prevention-vulnerability and early warning-the black bar safety net
As early as 6 May 13, Microsoft released patches to fix numbered CVE-2017-8464 vulnerability, a local user or a remote attacker can exploit this vulnerability to generate a specially crafted shortcut, and through a removable device or a remote shared way lead to remote code execution, Dating back...
About the security content of Safari 10.1.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
