2271 matches found
IBM Tealeaf Customer Experience Information Disclosure Vulnerability
IBM Tealeaf Customer Experience is a SaaS-based analytics solution for web and mobile applications from IBM USA. The solution helps clients understand and improve the overall user experience through the analysis of data, supporting rich visualization and data exploration through the adoption of...
UBUNTU-CVE-2015-8895
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...
Microsoft OneNote 2 0 1 3 null pointer read or cause RCE-vulnerability warning-the black bar safety net
The problem exists Software: One Note 2 0 1 3 Operating systemname: Microsoft Windows 7 Professional Operating systemversion: 6.1.7601 Service Pack 1 Build 7 6 0 1 Manufacturer: Microsoft Corporation According to WinDBG! exploitable extensions, Microsoft OneNote 2 0 1 3 There is at least one deni...
WinRAR SFX 'Text and Icon'函数远程代码执行漏洞
0 0 0 0...
Multiple Huawei Product Catalog Traversal Vulnerabilities
The Huawei HG532e, HG532n and HG532s are wireless router products from Huawei China. A directory traversal vulnerability exists in multiple Huawei products. A remote attacker can leverage the directory traversal character '...' in the icon/ URI to read arbitrary files. This vulnerability can be...
Chrome 46 Patches, Mixed Content Warning Changes
Google has made some changes to the way it presents browser warnings in Chrome. Starting with Chrome 46, don’t expect to see the yellow warning icon on HTTPS pages with minor errors. Google announced on Tuesday that it would start marking those pages with the neutral icon it uses on unencrypted...
Android 5. x vulnerability: the hacker can bypass the screen password to enter the system-vulnerability warning-the black bar safety net
Many Android users will choose to use a lock screen password protect the device, but the latest burst of vulnerability was shocking: any person who without complex operation can bypass the lock screen directly into your system! An attacker can exploit the pilot gets a lock on the device all the...
UBUNTU-CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Code injection
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
chromium-browser: Character spoofing in omnibox
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296: Undefined Security Weakness
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
PT-2015-1934
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue concerns the UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc, which does not prevent the display of Unicode LOCK...
Python Network Recon Framework: ivre
IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including two modules for passive recon one p0f -based and one Bro -based and one module for active recon mostly Nmap -based, with a bit of ZMap . External programs /...
USN-2626-1 qt4-x11, qtbase-opensource-src vulnerabilities
Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into opening a specially crafted GIF image, a remote attacker could use this issue to cause Qt to crash, resulting in a denial of service. This issue only applied to...
Qt has multiple buffer overflow vulnerabilities (CNVD-2015-03161)
Qt is a cross-platform application framework. Multiple buffer overflow vulnerabilities exist in Qt versions prior to 4.8.7, and 5.x versions prior to 5.4.2, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted ICO image...
PhotoFiltre Studio X Handles ICO File Memory Corruption Vulnerability
PhotoFiltre Studio is a powerful and easy to use image editing software. A memory corruption vulnerability exists in PhotoFiltre Studio X's handling of ICO files, which allows attackers to exploit the vulnerability to construct malformed ICO files and cause the application to crash...
Microsoft Windows Shell File Format LNK Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...
Microsoft Windows Shell SMB LNK Code Execution Exploit
This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload and the trigger, and generates a LNK file which must be...