Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 65 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 65.0.3325.146 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

Canvs Canvas Cross-Site Scripting Vulnerability

Cnvs Canvas is an open source blog publishing platform. A cross-site scripting vulnerability exists in user details in Canvs Canvas version 3.4.2. A remote attacker can exploit this vulnerability to cause a denial of service and execute JavaScript code...

VMware vCenter Server 6.5.x < 6.5u1f Multiple Vulnerabilities (VMSA-2018-0007) (Spectre-1) (Meltdown)

The version of VMware vCenter Server installed on the remote host is 6.5.x prior to 6.5u1f. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106950; scriptversion"1.8";...

Immunity Canvas: HP_IMC_RCE

Name| hpimcrce ---|--- CVE| CVE-2017-5816 Exploit Pack| CANVAS Description| HP iMC Plat 7.2 dbman Code Execution Linux Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-17-340/ Repeatability: Infinite VENDOR: Hewlett Packard CVE Url:...

Node.js third-party modules: Media parsing in canvas is at least vulnerable to Denial of Service through multiple vulnerabilities

There is at least a DoS vulnerability in canvas. It segfaults node.js which leads to a Denial of Service, but according to !exploitable it could possibly be worse Module canvas node-canvas is a Cairo backed Canvas implementation for NodeJS. https://www.npmjs.com/package/canvas version: 1.6.9 Stat...

Cross site scripting

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

CVE-2017-1000507

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

CVE-2017-1000507

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

CVE-2017-1000507

Canvs Canvas 3.4.2 is affected by a Cross Site Scripting (XSS) vulnerability in User’s details. The provided connected documents identify the issue but do not specify root cause details, affected subcomponents beyond the User’s details, exploit status, or a confirmed patch version. Potential impa...

CVE-2017-1000507

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

Immunity Canvas: SPECTRE_SAM_LEAK

Name| spectresamleak ---|--- CVE| CVE-2017-5753-1 Exploit Pack| CANVAS Description| Spectre Sam Leak Notes| CVE Name: CVE-2017-5753 Notes: The final version should also handle Windows 2016 and 10. In fact the backend is perfectly working on Windows 2016 but libwincreds is not able to deal with...

Immunity Canvas: SPECTRE_FILE_LEAK

Name| spectrefileleak ---|--- CVE| CVE-2017-5753 Exploit Pack| CANVAS Description| Spectre File Leak Notes| CVE Name: CVE-2017-5753 Notes: This module gives an unpriviledged user the ability to dump a file from the kernel memory. A common scenario is to dump the /etc/shadow or kerberos tickets...

CVE-2017-5715

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Recent assessments: pwsh at March 03, 2021 3:34pm UTC reported: I am submitting this...

Immunity Canvas: GOAHEAD_ENV_RCE

Name| goaheadenvrce ---|--- CVE| CVE-2017-17562 Exploit Pack| CANVAS Description| GoAhead 3.6.5 Remote Code Exec Notes| References: https://www.elttam.com.au/blog/goahead/ Repeatability: Unlimited VENDOR: EmbedThis Software CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2017-17562 CVE Name:...

chromium-browser: cross origin information disclosure in skia

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Immunity Canvas: COUCHDB_ROLES

Name| couchdbroles ---|--- CVE| CVE-2017-12635 Exploit Pack| CANVAS Description| Apache CouchDB Authentication Bypass RCE Notes| CVE Name: CVE-2017-12635 VENDOR: http://couchdb.apache.org/ Notes: 12/8/2017 Windows 10 / CouchDB 2.0.0 - Exploit created Ubuntu 14.04 / CouchDB 1.5.0 - Exploit created...

Fedora 25 : 1:tomcat (2017-f499ee7b12)

This update includes a rebase from 8.0.46 up to 8.0.47 which resolves a single CVE along with various other bugs/features : rhbz1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615 Note that Tenable Network Security has extracted the preceding description block directly...

AlienVault : Puplic .htaccess/.htpasswd/.canvas files leads to password disclosure.

iam a big fan of fuzzing/bruteforcing after my last submission 288533 on http://data.alienvault.com, i decided to go further, after some bruteforcing i came across this directory which looked kinda interesting for me http://data.alienvault.com/snort/ when u try to access the directory you will ge...

Threatpost News Wrap Podcast for Nov. 3

Threatpost editors Mike Mimoso and Tom Spring discuss the week’s top information security news stories, including Google’s decision to drop HTTP Public Key Pinning in Chrome, a vulnerability in Google’s Issue Tracker, Mozilla’s decision to ban Canvas Fingerprinting, and a HTTPS issue with...