965 matches found
Mozilla Firefox competition condition vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a Competitive Condition Issue vulnerability that originates from a competitive condition in the Web presentation component. No detailed vulnerability details are provided a...
Sentry Hardware Sentry KM security vulnerability
Hardware Sentry KM is a hardware device view from Sentry France. It takes hardware monitoring in TrueSight to a new level by providing a dedicated view in TrueSight Presentation Server. An information disclosure vulnerability exists in Hardware Sentry KM versions prior to 10.0.01, which stems fro...
Threat Source Newsletter (April 15, 2021)
Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. If you missed our webinar last week, we've got you covered. We've uploaded an extended version to our YouTube page that includes the scripts used in the presentation. This video will show you how to reverse-engineer and... This is...
Google Chrome Memory Use After Free
The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Creepy - A Geolocation OSINT Tool. Offers Geolocation Information Gathering Through Social Networking Platforms
This project is currently not maintained. I haven't put any work on it since 2016 and with the current state of the API access to instagram and twitter, and the default settings for their geolocation features cree.py wouldn't be of much use. I will live the repository and site up for the time but...
Command Execution Vulnerability in Yitoa's Office Drawing Software
Yitoa Graph is a simple and easy-to-use graphical expression workbench that enables the drawing of hundreds of graphical charts in professional fields such as flowcharts, architecture diagrams, engineering diagrams, mind maps, etc., and also provides a whiteboard for brainstorming and arbitrary...
Sailfish PresentationAvailabilityObserver::AvailabilityChanged DoS
The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
January 12, 2021-KB4586876 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2
None None...
January 12, 2021-KB4597249 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803
None None...
Use After Free
Use after free in presentation API in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
PYSEC-2020-72
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...
Cross site scripting
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...
Microsoft Office Spoofing
The vulnerability of the Microsoft Office suite is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
Exploit Title: BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery Date: 2020-09-11 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://bigbluebutton.org/ Version: BigBlueButton 2.2.25 RedTeam Pentesting discovered a vulnerability in the BigBlueButton web...
Command Execution Vulnerability in Extreme Demo 2019 (Windows Client)
Extreme Presentation 2019 is the PPT office software in the Extreme Office office suite A command execution vulnerability exists in Extreme Presentation 2019 Windows client. An attacker can exploit the vulnerability to execute arbitrary code...
CVE-2020-27608
In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...
Design/Logic Flaw
In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...
CVE-2020-27608
BigBlueButton vulnerability CVE-2020-27608 affects versions prior to 2.2.28. The issue stems from uploaded presentations being sent to clients without a Content-Type header, enabling cross-site scripting (XSS) evidenced by a .png file extension used for an HTML document. Impact is limited to XSS ...
