Google Chrome Multifunction Box Policy Enforcement Deficiency Vulnerability

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in omnibox in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to bypass security restrictions with the help of specially...

Unspecified Vulnerability in Google Chrome (CNVD-2020-38213)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome suffers from an unspecified vulnerability (CNVD-2020-38209)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-26222)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service via specially crafted HTML pages...

Google Chrome WebRTC Buffer Overflow Vulnerability (CNVD-2020-31535)

Google Chrome is a web browser from Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A security vulnerability exists in WebRTC in Google Chrome versions prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to execute...

Google Chrome Cache Misbehavior Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 81.0.4044.92. A remote attacker can exploit the vulnerability to disclose cross-origin data with the help of specially crafted HTML pages...

Code injection

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user with the Subscriber role to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages via...

Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System

A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...

WP Lead Plus X <= 0.99 - Multiple Cross-Site Request Forgery (CSRF)

None of the functions in this plugin use nonce checks, so it is possible for an attacker to perform any action that the plugin is capable of by tricking an administrator into clicking a specially crafted link designed to perform that action. This includes capabilities such as adding new pages,...

CVE-2018-19131

A Cross-Site Scripting vulnerability has been discovered in squid in the way X.509 certificates fields are displayed in some error pages. An attacker who can control the certificate of the origin content server may use this flaw to inject scripting code in the squid generated page, which is...

Mirus Landing Page Cross Site Scripting

Exploit Title: Mirus Landing Pages V1 XSS Vulnerability Google Dork:N/A Date: 2020-04-03 Exploit Author: @ThelastVvV Vendor Homepage: https://mirus.co.il/ Version: Landing Pages v1 Tested on: Ubuntu --------------------------------------------------------- PoC 1 : XSS Vulnerability Payloads : In...

Fedora: Security Advisory for tomcat (FEDORA-2020-c870aa8378)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: tomcat-9.0.31-2.fc31

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

CVE-2020-8966

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

Cross-Site Scripting (XSS)

mailman is vulnerable to cross-site scripting XSS. A listowner is able to inject and execute arbitrary Javascripts in a user's browser via the listinfo pages...

mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages

A cross-site scripting vulnerability XSS has been discovered in mailman due to the hostname field not being properly validated. A malicious list owner could use this flaw to create a specially crafted list and inject client-side scripts...

php: Reflected XSS vulnerability on PHAR 403 and 404 error pages

An issue was discovered in ext/phar/pharobject.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an...

F5 Networks BIG-IP : BIG-IP APM Portal Access vulnerability (K73183618)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.2 / 12.1.5.2 / 14.1.2.5 / 15.0.1.3 / 15.1.0.2 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K73183618 advisory. InBIG-IP APM Portal Access, HTTP pages that are served by back-end serve...

[SECURITY] Fedora 30 Update: ckeditor-4.14.0-1.fc30

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 31 Update: ckeditor-4.14.0-1.fc31

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...