4086 matches found
CVE-2018-5106: Exposure of Sensitive Information to an Unauthorized Actor
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...
CVE-2017-16130
exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as...
Cybersecurity Reference Architecture: Security for a Hybrid Enterprise
The Microsoft Cybersecurity Reference Architecture describes Microsofts cybersecurity capabilities and how they integrate with existing security architectures and capabilities. We recently updated this diagram and wanted to share a little bit about the changes and the document itself to help you...
AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass Exploit
Exploit for hardware platform in category dos / poc / ======== Intro / Overview ======== After Michael Schwarz made some interesting observations, we started looking into variants other than the three already-known ones. I noticed that Intel's Optimization Manual says in section 2.4.4.5 "Memory...
AMD ARM Intel - Speculative Execution Variant 4 Speculative Store Bypass
AMD ARM Intel - Speculative Execution Variant 4 Speculative Store Bypass / ======== Intro / Overview ======== After Michael Schwarz made some interesting observations, we started looking into variants other than the three already-known ones. I noticed that Intel's Optimization Manual says in...
AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass
/ ======== Intro / Overview ======== After Michael Schwarz made some interesting observations, we started looking into variants other than the three already-known ones. I noticed that Intel's Optimization Manual says in section 2.4.4.5 "Memory Disambiguation": A load instruction micro-op may depe...
Open-Xchange: [XSS] Style/Event Filter Bypass v4.0
Hi. I update today to 7.8.4 Rev28. And found new way - no filter before Previous reports 314204 Without // comment you checking: 1. As Object Payload: Result: 2. Сomma && empty object Payload: Result: Fix - I think you need replace all ' = &x27 if style='a"a&x27a' and replace all " = &x22 if...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 16, 2018
It was a crazy week at this year’s RSA Conference in San Francisco. I always try to get a quick view of the floor to see companies old and new exhibit their wares. Unfortunately, work never sleeps when you attend a conference, and the shortage of seating at this year’s event left many, including...
WordPress Ajax Pagination (twitter Style) plugin path traversal vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers set up a personal blog site . Ajax Pagination twitter Style plugin is used in one of the paging plugin . A path traversal vulnerability exist...
CVE-2014-2674
Directory traversal vulnerability in the Ajax Pagination twitter Style plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the loop parameter in an ajaxnavigation action to wp-admin/admin-ajax.php...
CVE-2014-2674: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Ajax Pagination twitter Style plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the loop parameter in an ajaxnavigation action to wp-admin/admin-ajax.php...
PT-2018-4205
Name of the Vulnerable Software and Affected Versions Ajax Pagination twitter Style plugin version 1.1 for WordPress Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the loop parameter in an...
Third party CSS is not safe
A few days ago there was a lot of chatter about a 'keylogger' built in CSS. Some folks called for browsers to 'fix' it. Some folks dug a bit deeper and saw that it only affected sites built in React-like frameworks, and pointed the finger at React. But the real problem is thinking that third part...
indian-style.com XSS vulnerability
Open Bug Bounty ID: OBB-568225 Description| Value ---|--- Affected Website:| indian-style.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the PPTStyleSheet function in the PowerPoint file analyzer of the Apache OpenOffice office package allows a hacker to execute arbitrary code.
The vulnerability of the PPTStyleSheet function in the Apache OpenOffice office package’s PPT file analyzer is related to data writing beyond the buffer limit. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond the buffer boundaries when applying style rules to pseudo-elements such as ::first-line. Exploiting this vulnerability can allow a malicious actor to cause a service failure using cached style data...
[SECURITY] Fedora 26 Update: mongodb-3.4.10-1.fc26
Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...
Sql injection
SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...
