Lucene search
+L

146 matches found

Check Point Advisories
Check Point Advisories
added 2017/10/26 12:0 a.m.5 views

Metasploit Multiple Browsers Obfuscation Technique

Remote attackers can use metasploit modules in order to check for potential browser vulnerabilities on a target client. This information can later be used for attacks...

4.9AI score
SaveExploits0
GoogleProjectZero
GoogleProjectZero
added 2017/09/21 12:0 a.m.42 views

The Great DOM Fuzz-off of 2017

Posted by Ivan Fratric, Project Zero Introduction Historically, DOM engines have been one of the largest sources of web browser bugs. And while in the recent years the popularity of those kinds of bugs in targeted attacks has somewhat fallen in favor of Flash which allows for cross-browser exploi...

7.5CVSS7.7AI score0.87598EPSS
SaveExploits13
BDU FSTEC
BDU FSTEC
added 2016/12/27 12:0 a.m.15 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to circumvent existing access restrictions policies

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...

2.6CVSS7.5AI score0.14329EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/11/28 12:0 a.m.11 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to escalate their privileges

The vulnerabilities of Microsoft Edge and Internet Explorer are related to errors in access control of namespace resources. Exploiting these vulnerabilities can allow a malicious actor to enhance their privileges using undefined vectors...

6.8CVSS6.7AI score0.19932EPSS
SaveExploits1References3Affected Software1
ThreatPost
ThreatPost
added 2016/07/14 2:28 p.m.19 views

EFF Again Calls for Investigation Around W3C's DRM Extension

Digital rights advocates are again pleading with the World Wide Web Consortium W3C to reconsider standardizing DRM in Encrypted Media Extensions, a draft specification that would ultimately feed into HTML 5. Advocacy groups like the Electronic Frontier Foundation EFF and security researchers alik...

0.4AI score
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.6 views

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

10CVSS8.1AI score0.05721EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.10 views

Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information

Vulnerabilities that allow for the execution of arbitrary code remotely exist in Internet Explorer due to improper access to objects in memory. These vulnerabilities can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.20344EPSS
SaveExploits3References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.9 views

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities in the browser engine of Mozilla Firefox and SeaMonkey allow malicious actors operating remotely to cause service failures memory errors and unexpected application exits, or execute arbitrary code...

10CVSS5.8AI score0.04977EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.7 views

Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...

10CVSS7.2AI score0.04977EPSS
SaveExploits1References3Affected Software1
hackapp
hackapp
added 2016/04/01 8:56 a.m.16 views

Learn Spanish. Speak Spanish - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Spanish. Speak Spanish published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.11 views

Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...

10CVSS7.8AI score0.01585EPSS
SaveExploits0References12Affected Software1
myhack58
myhack58
added 2016/03/15 12:0 a.m.22 views

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

7AI score
SaveExploits0
Debian CVE
Debian CVE
added 2016/03/13 6:0 p.m.28 views

CVE-2016-1953

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vecto...

8.8CVSS10AI score0.03226EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/02/12 12:0 a.m.8 views

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...

9.3CVSS7.8AI score0.01307EPSS
SaveExploits0References29Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/28 12:0 a.m.7 views

Vulnerability of Microsoft Edge and Internet Explorer browsers, allowing a perpetrator to execute arbitrary web scripts with elevated privileges

The vulnerabilities of Microsoft Edge and Internet Explorer are related to content processing errors on websites. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary web scripts with elevated privileges through a specially crafted website...

9.3CVSS5.9AI score0.15718EPSS
SaveExploits0References3Affected Software1
Debian
Debian
added 2016/01/27 12:58 p.m.106 views

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

10CVSS8.2AI score0.03961EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:0 a.m.7 views

Firefox browser’s vulnerabilities, which allow a hacker to trigger a service failure or execute arbitrary code

The multiple vulnerabilities in the Firefox browser’s kernel are caused by buffer overflows. Exploiting these vulnerabilities can allow a malicious actor to cause a service failure memory corruption or execute arbitrary code...

10CVSS7.7AI score0.05852EPSS
SaveExploits0References15Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/09/23 12:0 a.m.9 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, allowing attackers to execute arbitrary code or trigger service failures

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a denial-of-service attack using a specially crafted website...

9.3CVSS6.3AI score0.20243EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2015/09/08 5:55 p.m.9 views

MGASA-2015-0356 Updated chromium-browser packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash or, potentially, execute arbitrary code with the privileges of the user running Chromiu...

7.5CVSS7.4AI score0.0224EPSS
SaveExploits2References8
BDU FSTEC
BDU FSTEC
added 2015/05/07 12:0 a.m.8 views

Vulnerabilities in the Google Chrome browser, which allow a malicious actor to trigger a service failure or otherwise affect the system.

Multiple vulnerabilities in the Google Chrome browser, which, if exploited, could cause a remote attacker to trigger a service failure or other adverse effects...

7.5CVSS7.8AI score0.01367EPSS
SaveExploits0References25Affected Software1
Rows per page
Query Builder