[SECURITY] [DSA 2695-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2695-1 (chromium-browser - several issues)

Several vulnerabilities have been discovered in the Chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to caus...

DSA-2695-1 chromium-browser - several

Bulletin has no description...

Google Chrome < 27.0.1453.93 Multiple Vulnerabilities

Binary data 800944.prm...

CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

CVE-2013-2848 refers to a vulnerability in the XSS Auditor component of Chromium/Google Chrome before 27.0.1453.93, which could allow remote attackers to obtain sensitive information via unspecified vectors. Affected product/versions: Chromium/Chrome up to 27.0.1453.93 (Chromium before 27.0.1453....

CVE-2013-2848

Removed by vendor...

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

Binary data 6706.pasl...

Information disclosure

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors...

CVE-2013-0909

CVE-2013-0909 is a Google Chrome vulnerability where the XSS Auditor could disclose the HTTP Referer information. Affected software is Chrome prior to version 25.0.1364.152. Root cause is described as a flaw in Referer handling within the XSS Auditor, enabling partial confidentiality loss. Accord...

CVE-2013-0909

Removed by vendor...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 176882 High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. 176252 High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to "chromium.khalil". 172926 172331 High CVE-2013-0904: Memory corruption in Web Audio. Credit to...

[Scylla] v1 Penetration Testing Tool - Because there's no patch for human stupidity

When there's no technical vulnerability to exploit, you should try to hack what humans left for you, and believe me, this always works. Scylla provides all the power of what a real audit, intrusion, exclusion and analysis tool needs, giving the possibility of scanning misconfiguration bugs...

PCI DSS Compliance : Handling False Positives

Note that per PCI Security Standards Council PCI SSC standards, if the version of the remote software is known to contain flaws, a vulnerability scanner must report it as vulnerable. The scanner must still flag it as vulnerable, even in cases where a workaround or mitigating configuration option ...

Coalfire Expands Dallas Office and Names Kurt Hagerman Managing Director

I am pleased to announce that our Dallas office is growing by leaps and bounds. Leading the charge is Kurt Hagerman, the newly appointed managing director. Kurt will serve more than 60 clients in the Southwest region and oversee Coalfires strategic vision while building new client relationships f...

SMB Session Pipe Auditor

Determine what named pipes are accessible over SMB This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Session Pipe Auditor', 'Description' = 'Determine what named pipes are accessible over SMB...

ExtCalendar 2.0 Beta 2 cross site scripting

Exploit for unknown platform in category web applications =========================================== ExtCalendar 2.0 Beta 2 cross site scripting =========================================== Summary: ExtCalendar is a powerful multi-user web-based calendar application. Features include...