CVE-2021-21115

CVE-2021-21115 : In Google Chrome before 87.0.4280.141, a use-after-free in the Safe Browsing component could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. This is confirmed in connected advisories (e.g., Arch Linux ASA-202101-6) referencing Chromium ...

CVE-2021-21115

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21115

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21110

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21110

CVE-2021-21110 concerns Chromium/Chrome: a use-after-free in the safe browsing component of the Chromium browser before version 87.0.4280.141 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Connected advisories consistently tie this CVE to Chromium u...

CVE-2021-21110

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

Session fixation

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome memory misreference vulnerability (CNVD-2021-04417)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Backdoor.Win32.Zombam.k Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/79d9908b6769e64f922e74a090f5ceeb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.k Vulnerability: Remote String Dereference Stack Buffer Overflow Description:...

CVE-2020-26292

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source...

Backdoor.Win32.Zombam.j Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/a4212f23e1cc3bb34b0dfe15b2ad323e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.j Vulnerability: Remote Stack Buffer Overflow Description: Listens on TCP port...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01866)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01865)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Rust Competition Condition Problem Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust futures-util crate before 0.3.7, which stems from the fact that MutexGuard::map can lead to data contention in certain closure cases in safe code...

Brave Software: Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostname

A vulnerability was discovered in Brave iOS nightly build that allowed bypassing of the phishing/malware site blocking feature by adding a trailing dot in the hostname. This allowed users to access prohibited sites without being blocked by Brave Shield protection...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75025)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...