9605 matches found
Privilege Escalation
linux kernel is vulnerable to privilege escalation. A local attacker with monitor perf events permissions is able to corrupt memory and obtain higher privileges...
CVE-2020-28272
creationtimestamp| type| source ---|---|--- 2020-12-02 18:55:06+00:00| seen| https://t.me/cibsecurity/17031 2022-01-29 00:22:20+00:00| seen| https://t.me/cibsecurity/36532 2022-05-24 17:35:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8mp8-28xh-r486...
ChurchCRM 4.2.0 CSV Injection
Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection Date: 2020- 10- 24 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM Version: 4.2.0 Payload: =10+20+cmd|' /C calc'!A0 Tested on: Kali Linux 2020.3 Proof Of Concept: CSV...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2020-2083)
This update for java-180-openjdk fixes the following issues : - Fix regression '8250861: Crash in MinINode::IdealPhaseGVN, bool', introduced in October 2020 CPU. - Update to version jdk8u272 icedtea 3.17.0 July 2020 CPU, bsc1174157, and October 2020 CPU, bsc1177943 - New features + JDK-8245468: A...
WordPress Events Manager plugin <= 5.9.7.3 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability found by Antony Garand in WordPress Events Manager plugin versions = 5.9.7.3. Solution Update the WordPress Events Manager plugin to the latest available version at least 5.9.8...
WordPress Events Manager plugin <= 5.9.7.3 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found by Jakob Wierzba in WordPress Events Manager plugin versions = 5.9.7.3. Solution Update the WordPress Events Manager plugin to the latest available version at least 5.9.8...
CVE-2017-15681
creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:15+00:00| seen| https://t.me/cibsecurity/16895 2020-12-09 07:32:02+00:00| seen| https://t.me/cibsecurity/17440...
CVE-2019-19875
creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:14+00:00| seen| https://t.me/cibsecurity/16894 2020-12-09 07:32:01+00:00| seen| https://t.me/cibsecurity/17439...
CVE-2017-15684
creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:07+00:00| seen| https://t.me/cibsecurity/16889 2020-12-09 07:31:54+00:00| seen| https://t.me/cibsecurity/17434...
CVE-2017-15685
creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:02+00:00| seen| https://t.me/cibsecurity/16887 2020-12-09 07:31:52+00:00| seen| https://t.me/cibsecurity/17432...
CVE-2020-28921
creationtimestamp| type| source ---|---|--- 2020-11-27 20:49:59+00:00| seen| https://t.me/cibsecurity/16883 2020-12-09 07:31:46+00:00| seen| https://t.me/cibsecurity/17428...
CVE-2019-16364
creationtimestamp| type| source ---|---|--- 2020-11-27 20:46:20+00:00| seen| https://t.me/VulnerabilityNews/18705 2020-11-27 20:50:14+00:00| seen| https://t.me/cibsecurity/16894 2020-12-09 07:32:01+00:00| seen| https://t.me/cibsecurity/17439...