9874 matches found
PT-2017-7209
Name of the Vulnerable Software and Affected Versions ONOS versions prior to 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and switch disconnect, by sending two Ethernet frames with ether type Jumbo Frame 0x8870...
CVE-2015-7516: NULL Pointer Dereference
ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service NULL pointer dereference and switch disconnect by sending two Ethernet frames with ethertype Jumbo Frame 0x8870...
MyDoomScanner 1.00 SEH Overwrite Proof Of Concept
!/usr/bin/python Exploit Title : MyDoomScanner1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Anurag Srivastava Email : [email protected] Website : http://pyramidcyber.com/ Discovery Date : 17/08/2017 Software Link :...
UBUNTU-CVE-2017-12855
Xen maintains the GTFread,writing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the...
CVE-2017-12855
CVE-2017-12855 affects Xen grant table handling: premature clearing of GTF_writing/GTF_reading bits can misinform a guest that a grant is no longer in use, potentially allowing reuse of a granted frame containing sensitive data while the other domain is still using it. Affected Xen versions inclu...
PT-2017-12729
Name of the Vulnerable Software and Affected Versions Xen versions 4.5 through 4.9 Description The issue arises when Xen incorrectly clears the status bits too early, informing the guest that a grant is no longer in use. This can lead to a guest prematurely reusing a granted frame that still...
Mozilla: Use-after-free with image observers (MFSA 2017-19)
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
CVE-2017-7808
A content security policy CSP "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox 55...
UBUNTU-CVE-2017-7784
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
CVE-2017-7784
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
UBUNTU-CVE-2017-7808
A content security policy CSP "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox 55...
WordPress: Clickjacking - https://mercantile.wordpress.org/
Hi team, While performing security testing of your website i have found the vulnerability called Clickjacking. What is Clickjacking ? Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different...
USN-3381-1 linux vulnerabilities
Peter Pi discovered that the colormap handling for frame buffer devices in the Linux kernel contained an integer overflow. A local attacker could use this to disclose sensitive information kernel memory. CVE-2016-8405 It was discovered that the Linux kernel did not properly restrict RLIMITSTACK...
PT-2017-19387
Name of the Vulnerable Software and Affected Versions hawk affected versions not specified Description The issue is related to setting Content-Security-Policy to frame-ancestors 'self'. There is no information about the estimated number of potentially affected devices worldwide or real-world...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
Design/Logic Flaw
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9522: Undefined Security Weakness
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
gtk-vnc buffer overflow vulnerability
gtk-vnc is a VNC viewer for use in GTK. A security vulnerability exists in gtk-vnc 0.4.2 and earlier versions, which stems from the program failing to properly detect frame buffer boundaries. An attacker could exploit the vulnerability to corrupt memory...