5992 matches found
The vulnerability in the implementation of the ParseFromSafeString() function in the DOMParser interface of the Mozilla Firefox browser allows a malicious actor to circumvent security restrictions.
The vulnerability of the ParseFromSafeString function in the DOMParser interface of the Mozilla Firefox browser involves the incorrect creation of duplicate instances of the SystemPrincipal object during the processing of HTML documents. Exploiting this vulnerability could allow a malicious actor...
USN-5816-1 firefox vulnerabilities
Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. An attacker could potentially exploits this to obtain sensitive information. CVE-2023-23597 Tom...
The vulnerability of the SAP Customer Data Cloud data management software lies in the use of a non-safe random number generator program, which allows an attacker to disclose sensitive information.
The vulnerability of the SAP Customer Data Cloud data management software is related to the use of a non-safe random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...
NetChess 2.1 Buffer Overflow Exploit
Exploit Title: NetChess2.1 Buffer Overflow SEH Exploit Author: Ugur Eminli Vendor Homepage: https://sourceforge.net/projects/avmnetchess/ Software Link: https://sourceforge.net/projects/avmnetchess/ Version: 2.1 Tested on: WinXP SP2 Build 2600 !/usr/bin/perl my $file= "exploit.pgn"; my $junk=...
Stealing money from protocol
Lines of code Vulnerability details Impact Parameters address from,uint256 amount passed in the function call distribute not checked , attacker can specify any address approved to distrutor and any amount to steal asset Proof of Concept function distribute IERC20 erc20, address from, uint256 amou...
Vulnerability fixed in sudo
A vulnerability has been fixed in sudo's -e option also known as sudoedit. A malicious person with sudoedit privileges can exploit the exploit the vulnerability to edit arbitrary files. In this way, the malicious party can obtain elevated privileges on the vulnerable system. The developers of sud...
GSD-2023-1001359 arm64: make is_ttbrX_addr() noinstr-safe
arm64: make isttbrXaddr noinstr-safe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit 0461a8c278b8fe74d19e58bc224327bef645e29...
GSD-2023-1001036 arm64: make is_ttbrX_addr() noinstr-safe
arm64: make isttbrXaddr noinstr-safe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit 9d05c20b0ac97a688f6f6747da45b4d1e287b806...
GSD-2023-1000613 arm64: make is_ttbrX_addr() noinstr-safe
arm64: make isttbrXaddr noinstr-safe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit f6cd079bb223312256428624af1e53fc5a291dd4...
Google to support the use of Rust in Chromium
In a blog by the Chrome security team we learned that the Chromium project is going to support the use of third-party Rust libraries from C++ in Chromium. This is good news because Rust is a so-called memory-safe programming language. So using it in a widespread program like Chrome and the other...
UBUNTU-CVE-2023-23589
The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002...
CVE-2023-23589
The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002...
CVE-2022-3143
wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead...
Attacker can take control over each SmartAccount proxy and steal all users' funds
Lines of code Vulnerability details Attacker can take control over each SmartAccount proxy and steal all users' funds Impact All users' funds can be stolen by a single attacker tx gas cost only Proof of Concept There are 2 main reasons for this vulnerability: The .checkSignatures in...
Sorare: Mystery with a leaked token and Reusability of email confirmation link leading to Account Takeover
A vulnerability was discovered where leaked email confirmation links could be reused to gain access to a user's account without requiring a password. This was possible by modifying the token parameter in the URL of the expired confirmation link. An attacker who gains access to such a leaked link...
Unspecified Vulnerability in ZOHO ManageEngine Device Control Plus (CNVD-2023-00006)
ZOHO ManageEngine Device Control Plus is a USB device control software from ZOHO USA. It is used to control, block and monitor all removable devices connected to the computer. A security vulnerability exists in ZOHO ManageEngine Device Control Plus version 10.1.2228.15, which originates from the...
OESA-2022-2146 sqlite security update
Security Fixes: SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.CVE-2022-46908...
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...
