8429 matches found
The vulnerability of the Microsoft Edge browser, which allows a hacker to bypass the protection against cross-site scripting attacks
The vulnerability of Microsoft Edge exists due to a flaw in the process of checking HTML attributes. Exploiting this vulnerability allows a malicious actor to bypass the protection mechanisms against cross-site scripting attacks...
Microsoft Edge Arbitrary Script Code Execution Vulnerability
Microsoft Edge is one of the latest WEB browsers. Microsoft Edge does not disable HTML attributes in HTTP response data, allowing remote attackers to exploit the vulnerability. A special WEB page is constructed to trick the user into loading it, which can execute arbitrary script code...
CVE-2015-6058
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass."...
CVE-2015-6058
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass."...
Mango Automation 2.6.0 Unprotected Debug Log View
Mango Automation 2.6.0 Unprotected Debug Log View Vulnerability Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a flexible SCADA, HMI And Automation software application tha...
Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2015-06384)
Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox NetworkUtils.cpp file allows remote attackers to bypass the ECMAScript 5 API protection mechanism, modify immutable attributes, and execute arbitrary JavaScript code with chrome privileges...
Ruby on Rails: Nested attributes reject_if proc can be circumvented by providing "_destroy" parameter
Nested attributes rejection proc bypass in Active Record. There is a vulnerability in how the nested attributes feature in Active Record handles updates in combination with destroy flags when destroying records is disabled. This vulnerability has been assigned the CVE identifier CVE-2015-7577...
UBUNTU-CVE-2015-4504
The lutinverseinterp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service buffer over-read and application crash via crafted attributes in the ICC 4 profile of an image...
Total Commander 8.52 - Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python EXPLOIT TITLE: Total Commander 8.52 Buffer Overflow AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: UnN0n Date of Testing: 19th September 2015 Download Link : http://tcmd852.s3-us-west-1.amazonaws.com/tc852x32b1.exe Tested On :...
Total Commander 8.52 - Overwrite Buffer Overflow (SEH)
Total Commander 8.52 - Overwrite Buffer Overflow SEH ''' Exploit Title: Total Commander 32bit SEH Overwrite. Date: 8/27/2015 Exploit Author: UnN0n Software Vendor: http://www.ghisler.com/ Software Link: http://www.ghisler.com/download.htm Version: 8.52 Tested on: Windows 8 x6464 BIT Info: EAX...
Microsoft Internet Explorer mergeAttributes Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...
DEBIAN-CVE-2015-6587
The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...
Mozilla Firefox JSON Parsing Same Origin Policy Bypass Vulnerability
Mozilla Firefox is an open source WEB browser. Mozilla Firefox suffers from a security vulnerability when parsing JSON, which allows remote attackers to construct malicious WEB pages and trick users into parsing them, redefine non-configurable attributes on JavaScript objects, and bypass the...
The vulnerability of the Internet Explorer browser, which allows a hacker to bypass XSS filtering
The vulnerability of the Internet Explorer browser exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to bypass XSS filtering by using specific HTML attributes...
The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary web or HTML code.
The vulnerability of the Moodle learning management system’s sub-component “lib/javascript-static.js” exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using the IMG...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. Th...
Scientific Linux Security Update : freeradius on SL6.x i386/x86_64 (20150722)
A stack-based buffer overflow was found in the way the FreeRADIUS rlmpap module handled long password hashes. An attacker able to make radiusd process a malformed password hash could cause the daemon to crash. CVE-2014-2015 The freeradius packages have been upgraded to upstream version 2.2.6, whi...
SUSE-SU-2015:1224-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 Teradata kernel was updated to fix the following bugs and security issues. The following security issues have been fixed: - Update patches.fixes/udp-fix-behavior-of-wrong-checksums.patch bsc936831, CVE-2015-5364, CVE-2015-5366. - Btrfs: make xattr replace operatio...
RHEL 6 : freeradius (RHSA-2015:1287)
Updated freeradius packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
USN-2622-1 openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain search queries that returned empty attributes. A remote attacker could use this issue to cause OpenLDAP to assert, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-1164 Michael Vishchers discovered th...