1326 matches found
Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-01245)
Google Chrome is a popular web browser. Google Chrome fails to properly process JPEG2000 images, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...
[SECURITY] Fedora 23 Update: php-5.6.18-1.fc23
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability
A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to make changes to an affected system system. The vulnerability is due to improper implementation of authorization controls when accessing certain web pages of the...
LEADTOOLS ActiveX control DLL Load Arbitrary Code Execution Vulnerability
LEADTOOLS ActiveX control is an ActiveX control. A security vulnerability exists in LEADTOOLS ActiveX control that allows remote attackers to construct malicious web pages that can be tricked into parsing, leading to arbitrary code execution...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...
Google Chrome Omnibox Security Bypass Vulnerability
Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. A security vulnerability in Google Chrome's Omnibox implementation allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and falsifying the origin o...
Microsoft Edge Arbitrary Code Execution Vulnerability
Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security vulnerability in Microsoft Edge's Chakra JavaScript engine allows a remote attacker to build special WEB pages that can be tricked into parsing by user...
Microsoft Internet Explorer Security Mechanism Bypass Vulnerability (CNVD-2016-00287)
Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer that could be exploited by remote attackers to construct malicious Web pages that could be tricked into parsin...
AccessDiver 4.301 - Buffer Overflow
AccessDiver 4.301 - Buffer Overflow + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: =============================...
AccessDiver 4.301 - Buffer Overflow
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...
Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08150)
Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...
Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...
CVE-2015-6395
Cisco Prime Service Catalog 10.0, 10.0R2, 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188...
QuikCms 6.1 - CSRF Delete Web Pages Exploit
Exploit for php platform in category web applications Title : QuikCms 6.1 - CSRF Exploit Delete Web Pages Author : ZwX Vendor : http://opensolution.org/ Download Link : http://opensolution.org/download/home.html?sFile=Quick.Cmsv6.1-en.zip Version : 6.1 Security Level : Medium Tested Os : Windows ...
Advertising Alliance to morph hung it to the Union HackingTeam vulnerability weapons attack millions of Internet users-vulnerability warning-the black bar safety net
In the 1 1 month, 3 6 0 Internet Security Center monitoring to a product called“restartokwecha“Downloader Trojan to intercept the amount of surge,and its trace is found, the Trojan turned out from the PConline Pacific computer network, the 1ting a listen to the music network, the...
Mozilla Firefox and Firefox ESR Browser Engine Buffer Overflow Vulnerability
Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox. A security vulnerability exists in the browser engine of Mozilla Firefox that allows remote attackers to construct malicious WEB pages that can be tricked into parsing the application to perform...
Debian DSA-3391-1 : php-horde - security update
It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...
The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.
The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...
Mozilla Firefox 'SavedStacks' Class Denial of Service Vulnerability
Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox JavaScript implementation of the 'SavedStacks' class allows remote attackers to construct malicious WEB pages that can crash an application by tricking the user into parsing them...