Lucene search
+L

4040 matches found

Prion
Prion
•added 2020/10/08 7:15 p.m.•33 views

Design/Logic Flaw

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable i...

7.5CVSS9.6AI score0.02515EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2020/10/08 6:50 p.m.•94 views

CVE-2020-1914

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable i...

9.8CVSS9.7AI score0.02515EPSS
SaveExploits0
Mend
Mend
•added 2020/10/08 6:50 p.m.•4 views

CVE-2020-1914

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable i...

9.8CVSS0.02515EPSS
SaveExploits0References5
CVE
CVE
•added 2020/10/08 6:50 p.m.•143 views

CVE-2020-1914

The CVE-2020-1914 entry describes a logic vulnerability in Facebook Hermes related to the SaveGeneratorLong instruction. Before the commit b2021df620824627f5a8c96615edbd1eb7fdddfc, attackers could theoretically read out of bounds or execute arbitrary code via crafted JavaScript, but exploitation ...

9.8CVSS9.5AI score0.02515EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/10/08 6:50 p.m.•40 views

CVE-2020-1914

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable i...

9.7AI score0.02515EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/08 12:00 a.m.•6 views

CVE-2020-1914: Always-Incorrect Control Flow Implementation

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable i...

9.8CVSS6.5AI score0.02515EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/10/08 12:00 a.m.•7 views

PT-2020-15167

Name of the Vulnerable Software and Affected Versions Facebook Hermes versions prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc Description A logic issue in handling the SaveGeneratorLong instruction allows attackers to potentially read out of bounds or execute arbitrary code via crafted...

9.8CVSS0.02515EPSS
SaveExploits0References7
zdt
zdt
•added 2020/10/07 12:00 a.m.•821 views

Facebook steal Group 0day Exploit

Exploit can steal facebook Group and delete the old administrator and create a new administrator...

2.2AI score
SaveExploits0
OSV
OSV
•added 2020/10/06 3:15 p.m.•42 views

CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

7.5CVSS6.5AI score
SaveExploits0References12
OSV
OSV
•added 2020/10/06 3:15 p.m.•8 views

DEBIAN-CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

7.5CVSS7.5AI score0.03116EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/06 3:15 p.m.•25 views

Design/Logic Flaw

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

5CVSS7.3AI score0.03116EPSS
SaveExploits0References12Affected Software4
OSV
OSV
•added 2020/10/06 3:15 p.m.•14 views

UBUNTU-CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

7.5CVSS7.1AI score0.03116EPSS
SaveExploits0References8
Mend
Mend
•added 2020/10/06 2:57 p.m.•6 views

CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

8.7CVSS0.03116EPSS
SaveExploits0References18
AlpineLinux
AlpineLinux
•added 2020/10/06 2:57 p.m.•132 views

CVE-2020-26575

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

7.5CVSS7.5AI score0.03116EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/06 12:00 a.m.•5 views

CVE-2020-26575: Loop with Unreachable Exit Condition

In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement...

7.5CVSS7.2AI score0.03116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/06 12:00 a.m.•5 views

PT-2020-5495

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.7 and earlier Description The issue is related to the Facebook Zero Protocol FBZERO dissector in Wireshark, which could enter an infinite loop. This could allow a remote attacker to cause a denial of service. The problem...

8.8CVSS0.05803EPSS
SaveExploits8References198
Malwarebytes
Malwarebytes
•added 2020/10/05 5:00 p.m.•59 views

A week in security (September 28 – October 4)

Last week on Malwarebytes Labs, we dug into what happens when card fraud comes calling, we gave a rundown on some novel ransomware attacks that took advantage of smart coffee makers, and we introduced VideoBytes, our new, monthly series in which well provide video coverage of some of the...

0.2AI score
SaveExploits0
HackRead
HackRead
•added 2020/10/05 3:52 p.m.•52 views

SilentFade malware stole Facebook credentials, $4 million in ad fraud

By Deeba Ahmed Facebook claims that a Chinese company is responsible for operating SilentFade malware. This is a post from HackRead.com Read the original post: SilentFade malware stole Facebook credentials, $4 million in ad fraud...

2.6AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2020/10/02 3:17 p.m.•44 views

Facebook 'SilentFade' Malware Attack Stole Credentials For Years

Facebook has detailed a wide-scale Chinese malware campaign that targeted its ad platform for years and siphoned $4 million from users’ advertising accounts. The campaign was addressed by the social media’s security teams after it first became active. Dubbed SilentFade short for “Silently running...

7.1AI score
SaveExploits0References12
Wired Threat Level
Wired Threat Level
•added 2020/10/01 7:36 p.m.•33 views

Facebook Shut Down Malware That Hijacked Accounts to Run Ads

Hackers spent $4 million of victims’ money to buy ads for diet pills, fake designer handbags, and more...

3.6AI score
SaveExploits0
Rows per page
Query Builder