Spyware uses malicious adult games to infect Android & Window devices

By Waqas It looks like these spyware developers are fans of popular This is a post from HackRead.com Read the original post: Spyware uses malicious adult games to infect Android & Window devices...

CVE-2018-10716

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WMCLOSE is not properly considered...

OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with...

Oracle Java SE and JRockit have unspecified vulnerabilities (CNVD-2018-09074)

Java SE stands for Java Platform Standard Edition and is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. Java SE Embedded is based on Java SE and offers specific features and support for embedded systems. the JRockit family of...

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2 If this article does not answer your question, click this button to pose your question to other community members at Microsof...

Brave Browser Denial of Service Vulnerability (CNVD-2018-08687 )

Brave Browser is a web browser from Brave Software, USA. A security vulnerability exists in Brave Browser versions prior to 0.13.0, which arises from the program's failure to properly handle window dialogs. A remote attacker can exploit this vulnerability to cause a denial of service resource...

CVE-2017-18256

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service resource consumption via a long alert argument in JavaScript code, because window dialogs are mishandled...

CVE-2017-18256

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service resource consumption via a long alert argument in JavaScript code, because window dialogs are mishandled...

EUVD-2017-9387

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service resource consumption via a long alert argument in JavaScript code, because window dialogs are mishandled...

CVE-2017-18256

Brave Browser before 0.13.0 is vulnerable to a Denial of Service via a long alert() argument in JavaScript, caused by mishandling of window dialogs. A remote attacker can trigger resource consumption leading to a crash or degraded performance. Public references show PoC-style input and do not det...

CVE-2017-18256

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service resource consumption via a long alert argument in JavaScript code, because window dialogs are mishandled...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.38-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Internet Explorer - 'RegExp.lastMatch' Memory Disclosure

/ There is a vulnerability in Internet Explorer that could potentially be used for memory disclosure. This was tested on IE11 running on Window 7 64-bit with the latest patches applied. PoC: ========================================= / function main RegExp.input = toString: f; alertRegExp.lastMatc...

china-window.com XSS vulnerability

Open Bug Bounty ID: OBB-579564 Description| Value ---|--- Affected Website:| china-window.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Solaris 10 (x86) : 126364-08

SunOS 5.10x86: X Window System changes -. Date this patch was last updated by Sun : Oct/16/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Arista Networks EOS tcp_input Challenge ACKs Shared Counter Disclosure (SA0023)

The version of Arista Networks EOS running on the remote device is affected by a flaw in the Linux kernel implementation within file net/ipv4/tcpinput.c due to a failure to properly determine the rate of challenge ACK segments. An unauthenticated, remote attacker can exploit this issue to access...

mavo中noscript xss的安全绕过

首先，我们可以利用noscript不会对跟随字母数字的函数进行检测的特性，把函数与anchor属性的值结合以躲避检测。 mavoscript作为javascript的扩展，并不支持此类操作，所以我们需要将mavoscript转化为javascript模式。 从mavoscript的语法中可知，当mavo遇到无效的mavoscript时，它就会将无效的mavoscript当作javascript来处理。 //X=＇javascript ＇//X+=＇：alert＇+ y.rel + y.title test...

Etherpad Lite Cross-Site Scripting Vulnerability

Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A cross-site scripting vulnerability exists in the static/js/padutils.js file in Etherpad Lite versions prior to 1.6.3. A remote attacker can use window.location.href to inject arbitrary Web...

Linux kernel denial of service vulnerability (CNVD-2018-06440)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the Linux kernel prior to 4.14.4. The vulnerability arises because the...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...