FreeBSD : chromium -- multiple vulnerabilities (210f80b9-ede4-11e4-81c4-00262d5ed8ee)

Google Chrome Releases reports : 5 security fixes in this release, including : - 453279 High CVE-2015-1243: Use-after-free in DOM. Credit to Saif El-Sherei. - 481777 CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives. %NASLMINLEVEL 70300 C Tenable Network Security,...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 5 security fixes in this release, including: 453279 High CVE-2015-1243: Use-after-free in DOM. Credit to Saif El-Sherei. 481777 CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives...

MGASA-2015-0164 Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 42.0.2311.90 fixes several security issues, among others a cross-origin-bypass in HTML parser CVE-2015-1235, a cross-origin-bypass in Blink CVE-2015-1236, a use-after-free in IPC CVE-2015-1237, an out-of-bounds write in Skia CVE-2015-1238, an out-of-bounds read in WebGL...

chromium: multiple issues

CVE-2015-1235 cross-origin bypass A vulnerability was discovered that allows cross-origin-bypass in the HTML parser. - CVE-2015-1236 cross-origin bypass A vulnerability was discovered that allows cross-origin-bypass in the rendering engine Blink. - CVE-2015-1237 arbitrary code execution An...

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives

Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

IT-Grundschutz M4.368: Regelmaessige Audits der Terminalserver-Umgebung

IT-Grundschutz M4.368: Regelmaessige Audits der Terminalserver-Umgebung. Stand: 14. Ergaenzungslieferung 14. EL. Hinweis: Es wird lediglich ein Meldung ausgegeben, dass mit aktuelleten Plugins getestet werden soll. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted...

IT-Grundschutz M4.368: Regelmäßige Audits der Terminalserver-Umgebung

IT-Grundschutz M4.368: Regelmäßige Audits der Terminalserver-Umgebung. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Es wird lediglich ein Meldung ausgegeben, dass mit aktuelleten Plugins getestet werden soll. OpenVAS Vulnerability Test $Id: GSHBM4368.nasl 7883 2017-11-23 11:22:59Z emoss $...

Security update to Chromium 41.0.2272.76 (important)

Chromium was updated to 41.0.2272.76 bnc920825 Security fixes: CVE-2015-1212: Out-of-bounds write in media CVE-2015-1213: Out-of-bounds write in skia filters CVE-2015-1214: Out-of-bounds write in skia filters CVE-2015-1215: Out-of-bounds write in skia filters CVE-2015-1216: Use-after-free in v8...

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives.

Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

OWASP SSL audit: O-Saft

O-Saft is an easy to use tool to show informations about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. It’s designed to be used by penetration testers, security auditors or server administrators. The idea is to show the important...

China Demands Tech Companies to give them Backdoor and Encryption Keys

A number of western companies are doing big business in China, but now they may have to pay a huge value for to do so. China has introduced strict new banking cyber security regulations on western companies selling technology to Chinese banks. The Chinese government wants backdoors installed in a...

chromium: multiple issues

CVE-2014-7899 address bar spoofing A flaw allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string. - CVE-2014-7900 use-after-free Use-after-free vulnerability in the...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 39 to the stable channel for Windows, Mac and Linux. Chrome 39.0.2171.65 contains a number of fixes and improvements, including: 64-bit support for Mac A number of new apps/extension APIs Lots of under the hood changes for stability...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 42 security fixes in this release, including: 389734 High CVE-2014-7899: Address bar spoofing. Credit to Eli Grey. 406868 High CVE-2014-7900: Use-after-free in pdfium. Credit to Atte Kettunen from OUSPG. 413375 High CVE-2014-7901: Integer overflow in pdfium. Credit...

EAP6: Plain text password logging during security audit

It was found that the security audit functionality logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain...

New Initiative Simply Secure Aims to Make Security Tools Easier to Use

The dramatic revelations of large-scale government surveillance and deep penetration of the Internet by intelligence services and other adversaries have increased the interest of the general public in tools such as encryption software, anonymity services and others that previously were mainly of...

Google Chrome Multiple Vulnerabilities - 02 (Sep 2014) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Stable Channel Update

The stable channel has been updated to 37.0.2062.120 for Windows, Mac and Linux. This release contains an update for Adobe Flash as well as a number of other fixes. A full list of changes is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

www/chromium -- multiple vulnerabilities

Google Chrome Releases reports: 4 security fixes in this release, including: 401362 High CVE-2014-3178: Use-after-free in rendering. Credit to miaubiz. 411014 CVE-2014-3179: Various fixes from internal audits, fuzzing and other initiatives...

zAnti - Android Penetration Testing Toolkit (Free!)

zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety. zANTI offers a comprehensive range of fully customizable scans to...