1851 matches found
Android 5. x vulnerability: the hacker can bypass the screen password to enter the system-vulnerability warning-the black bar safety net
Many Android users will choose to use a lock screen password protect the device, but the latest burst of vulnerability was shocking: any person who without complex operation can bypass the lock screen directly into your system! An attacker can exploit the pilot gets a lock on the device all the...
UBUNTU-CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Code injection
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
chromium-browser: Character spoofing in omnibox
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Metasploit AV Evasion - Metasploit payload generator that avoids most Anti-Virus products
Metasploit payload generator that avoids most Anti-Virus products. Installing git clone https://github.com/nccgroup/metasploitavevasion.git chmod +x the avoid.sh file before use. How To Use ./avoid.sh Then follow the on screen prompts. Features Easily generate a Metasploit executable payload to...
Python Network Recon Framework: ivre
IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including two modules for passive recon one p0f -based and one Bro -based and one module for active recon mostly Nmap -based, with a bit of ZMap . External programs /...
USN-2626-1 qt4-x11, qtbase-opensource-src vulnerabilities
Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into opening a specially crafted GIF image, a remote attacker could use this issue to cause Qt to crash, resulting in a denial of service. This issue only applied to...
Qt has multiple buffer overflow vulnerabilities (CNVD-2015-03161)
Qt is a cross-platform application framework. Multiple buffer overflow vulnerabilities exist in Qt versions prior to 4.8.7, and 5.x versions prior to 5.4.2, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted ICO image...
PhotoFiltre Studio X Handles ICO File Memory Corruption Vulnerability
PhotoFiltre Studio is a powerful and easy to use image editing software. A memory corruption vulnerability exists in PhotoFiltre Studio X's handling of ICO files, which allows attackers to exploit the vulnerability to construct malformed ICO files and cause the application to crash...
Microsoft Windows Shell File Format LNK Code Execution Exploit
This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This Metasploit module creates the required files to exploit the vulnerability. They must be uploaded to an U...
Microsoft Windows Shell SMB LNK Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...
Microsoft Windows Shell File Format LNK Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...
Memory Corruption Vulnerability in Hanvon CoolPaint for Handling ICO Icons
HanWang CoolPaint is a drawing software developed by HanWang Technology Co. A memory corruption vulnerability exists in HanWang CoolPaint's handling of ICO icons, allowing attackers to exploit the vulnerability and crash the application...
Microsoft Windows Shell SMB LNK Code Execution Exploit
This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload and the trigger, and generates a LNK file which must be...
PT-2015-4468 · Microsoft · Windows 8 +8
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold a...
Memory Corruption Vulnerability in pmview Pro's Handling of ICO Images
PMView Pro is a super-fast viewing software that also supports multiple graphic formats for graphic viewing, editing, and conversion software, supporting filters, printing, automatic thumbnail generation, as well as screen copy, graphic scanning, SlideShow creation, and support for rotating the...
WordPress Plugin Easy Social Icons Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Easy Social Icons is one of the social icons you can upload your own , set the social URL plug-ins . Cross-site...
Fedora Update for oxygen-icon-theme FEDORA-2014-11448
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
