4703 matches found
[SECURITY] Fedora 22 Update: webkitgtk4-2.12.1-1.fc22
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
nspr, nss security update
CentOS Errata and Security Advisory CESA-2016:0684 An update for nss and nspr is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Moderate: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update
An update for nss and nspr is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
DEBIAN-CVE-2015-7801
Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file...
[SECURITY] Fedora 24 Update: webkitgtk4-2.12.1-1.fc24
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
ROPInjector - Convert any Shellcode in ROP and patch it into a given Portable Executable (PE)
A tool written in C Win32 to convert any shellcode in ROP and patch it into a given portable executable PE. It supports only 32-bit target PEs and the x86 instruction set. Published in Blackhat USA 2015, "ROPInjector: Using Return Oriented Programming for Polymorphism and Antivirus Evasion" More...
Avast Memory Corruption Vulnerability
Avast is a suite of antivirus software from the Czech company Avast Avast. A security vulnerability exists in Avast that can be exploited by remote attackers to cause a denial of service memory corruption or execute arbitrary code with the help of a specially crafted PE file...
[SECURITY] Fedora 24 Update: xerces-c-3.1.3-1.fc24
Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0...
MurderGame Portable - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MurderGame Portable published at the 'play' market has multiple vulnerabilities...
DeathRun Portable - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application DeathRun Portable published at the 'play' market has multiple vulnerabilities...
Prop Hunt Portable - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Prop Hunt Portable published at the 'play' market has multiple vulnerabilities...
Critical Strike Portable - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Critical Strike Portable published at the 'play' market has multiple vulnerabilities...
VulnCheck KEV: CVE-2013-1331
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document...
PentestBox 2.0 - Portable Penetration Testing Distribution for Windows Environments
PentestBox provides all security tools as a software package, eliminating requirement of Virtual machines or dualboot environments on Windows Operating System. It is created because more than 50% of penetration testing distribution users uses windows. Source So it provides an efficient platform f...
[SECURITY] Fedora 24 Update: webkitgtk3-2.4.10-1.fc24
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the Windows PDF library exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document...
PhotoLab Processing PNG Images Memory Corruption Vulnerability
PhotoLab is a Image Processing software developed by SELTECO Corporation company. A memory corruption vulnerability exists in the processing of PNG images. Allowing an attacker to exploit this vulnerability to construct a malformed PNG image can cause the program to crash; if successfully...
Google Chrome Remote Code Execution Vulnerability (CNVD-2016-01638)
Google Chrome is a web browser developed by the American company Google. Google Chrome handles special PDF files with a security vulnerability that allows a remote attacker to build special PDFs that can be tricked into parsing the application, which can crash the application or execute arbitrary...
Microsoft Windows Remote Code Execution Vulnerability (CNVD-2016-01570)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. PDF library is one of the PDF library. A remote code execution vulnerability exists in the PDF library of Microsoft Windows. A remote attacker can exploit this vulnerability by tricking a user into...