9523 matches found
NVIDIA GPU was traced to vulnerabilities, you can view the porn browsing history-bug warning-the black bar safety net
! Chrome's incognito mode in some specific cases not necessarily be able to protect individual privacy, recently a gamer the exposure of the Nvidia GPU of the previous vulnerability, the use of the vulnerability can view Chrome incognito mode to browse porn sites picture. Evan Andersen once loade...
MEDCIN engine of the exploitability of the vulnerability details-vulnerability warning-the black bar safety net
! Science: the MEDCIN engine is a service to doctors and nurses electronic medical records system. A few months ago, I was in the MEDCIN engine to older versions of the safety assessment found a loophole. So I to the Supplier a report of the vulnerabilities and then repair, after viewing the...
Udemy: CSRF in Udemy.com
The investigator removed cookies that are not used by our site and thought he had found a bypass. We were greatly delayed in getting this response to him...
Netgear 1.0.0.24 Cross Site Scripting
Details ================ Product Vendor: Netgear Bug Name: Cross Site Scripting in Netgear Router Version 1.0.0.24 Software: Netgear Router Firmware Version: 1.0.0.24 Last Updated: 10-06-2015 Homepage: http://netgear.com/ Severity High Vulnerable URL:...
Crony Cronjob Manager 0.4.4 Cross Site Request Forgery / Cross Site Scripting
Details ================ Title : Cross Site Scripting XSS & Cross Site Request Forgery CSRF in Crony Cronjob Manager Version 0.4.4 Affected Product : Crony Cronjob Manager Wordpress plugin Version 0.4.4 Vendor Homepage : https://wordpress.org/plugins/crony/developers/ Vulnerability Type : Cross...
Sawef - Send Attack Web Forms
SAWEF - Send Attack Web Forms DESCRIPTION The purpose of this tool is to be a Swiss army knife for anyone who works with HTTP, so far it she is basic, bringing only some of the few features that want her to have, but we can already see in this tool: - Email Crawler in sites - Crawler forms on the...
PHPIPAM 1.1.010 - Multiple Vulnerabilities
Exploit Title: PHPIPAM v1.1.010 Multiple Vulnerabilities Date: 04/01/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: http://phpipam.net/ Version: 1.1.010 Category: Multiple Vulnerabilities Tested on : 1.1.010 PHPIPAM description :...
WordPress Plugin Google Analytics by Yoast HTML Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blogging sites on servers with PHP and MySQL.Google Analytics by Yoast is one of the web analytics plugins available. An HTML injection vulnerability exists i...
esoTalk 1.0.0g4 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: esoTalk 1.0.0g4 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 11/17/2015 Disclosed to public: 12/21/2015 Release mode: Ful...
Scientific Linux Security Update : curl on SL7.x x86_64 (20151119)
It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...
CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
Information disclosure
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
FreeBSD : mozilla -- multiple vulnerabilities (2c2d1c39-1396-459a-91f5-ca03ee7c64c6)
The Mozilla Project reports : MFSA 2015-134 Miscellaneous memory safety hazards rv:43.0 / rv:38.5 MFSA 2015-135 Crash with JavaScript variable assignment with unboxed objects MFSA 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation MFSA 2015-137 Firefox allows...
CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
Privilege escalation vulnerabilities in WebExtension APIs — Mozilla
Mozilla developer Kris Maglione reported a mechanism where WebExtension APIs could be used to escalate privilege. This could allow arbitrary web content to execute code with the privileges of a particular WebExtension when using these API calls. Depending on the privileges of the extension used,...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2015-134 Miscellaneous memory safety hazards rv:43.0 / rv:38.5 MFSA 2015-135 Crash with JavaScript variable assignment with unboxed objects MFSA 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation MFSA 2015-137 Firefox allows...
UBUNTU-CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
CompuIT CMS - Cross Site Scripting Vulnerability
Exploit for php platform in category web applications - Title : CompuIT CMS - Cross Site Scripting Vulnerability - Author : ZwX - Date : 01/12/2015 - Vendor : http://www.compuitgh.com - Tested On : Windows 7 =============================== Description Vulnerability : =============================...
WordPress Ultimate Member Plugin <= 1.3.28 - Reflected Cross Site Scripting
Because of this vulnerability, attackers cat steal administrator's cookies, credentials and browser history and modify web page content to perform phishing attacks. Solution Update the plugin...