firefox security update

60.2.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 60.2.0-1 - Update to 60.2.0 ESR 60.1.0-9 - Do not set user agent rhbz1608065 - GTK dialogs are localized now rhbz1619373 - JNLP association works again rhbz1607457 60.1.0-8 - Fixed...

auroranetwork.it XSS vulnerability

Open Bug Bounty ID: OBB-660327 Description| Value ---|--- Affected Website:| auroranetwork.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the `lim_send_sme_probe_req_ind` function in the Qualcomm WLAN operating system’s Android component from the CAF repository allows a hacker to escalate their privileges.

The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the IPA driver of the Qualcomm Data Network Stack & Connectivity operating system for Android from the CAF repository allows a hacker to increase their privileges.

The vulnerability of the IPA driver of the Qualcomm Data Network Stack & Connectivity operating system for Android, found in the CAF repository, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Qualcomm WLAN operating system driver for Android from the CAF repository allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The Aurora Power Grid Vulnerability and the BlackEnergy Trojan

At recent Industrial IoT security briefings, the Aurora vulnerability has come up repeatedly. Attendees ask, “Is our country’s power grid safe? How can we protect the grid? What is Aurora?” This post provides a look at Aurora, and the BlackEnergy attack that can exploit Aurora. In March 2007, the...

Aurora DAO Denial of Service Vulnerability

Aurora DAO AURA is a decentralized trading system for Ether ECR-20 tokens. A security vulnerability exists in the Owned smart contract implementation in AURA. An attacker could exploit the vulnerability to gain ownership of the contract, causing a denial of service...

CVE-2018-10705

The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...

CVE-2018-10705

CVE-2018-10705 affects Aurora DAO (AURA) Ethereum ERC20 token. The Owned contract’s setOwner() is public and unprotected, allowing an attacker to acquire contract ownership. Once ownership is changed, privileged functions like lockBalances() can be called, enabling a Denial-of-Service (DoS) by pr...

CVE-2018-10705

The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...

Aurora IIDXM Design Vulnerability

Aurora IDEX Membership IDXM is a decentralized trading system for Ether ECR-20 tokens. A security vulnerability exists in the implementation of Owned smart contracts in Aurora IIDXM. An attacker could exploit the vulnerability to gain ownership of the contract and change the variables...

aurora.webcmms.com XSS vulnerability

Open Bug Bounty ID: OBB-613563 Description| Value ---|--- Affected Website:| aurora.webcmms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10666

The Owned smart contract implementation for Aurora IDEX Membership IDXM, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables...

Code injection

The Owned smart contract implementation for Aurora IDEX Membership IDXM, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables...

CVE-2018-10666

CVE-2018-10666 concerns the Owned smart contract implementation of Aurora IDEX Membership (IDXM). The vulnerability arises because setOwner is public, enabling an attacker to become contract owner. A new owner can then invoke functions protected by onlyOwner, potentially altering important variab...

The vulnerability of the wma_p2p_noa_event_handler function in the Android WLAN operating system from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmap2pnoaeventhandler function in the Android operating system, originating from the CAF repository, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

The vulnerability of the Android wireless network driver from the CAF repository, which allows a hacker to execute arbitrary code.

The vulnerability of the Android wireless network driver from the CAF repository allows for arbitrary code to be executed outside of the buffer in memory. Exploiting this vulnerability could enable a malicious actor to execute arbitrary code remotely...

The vulnerability of the Bootloader component of Android operating systems from the CAF repository allows a hacker to trigger buffer overflows.

The vulnerability of the bootloader component of Android operating systems from the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to trigger buffer overflows by manipulating data relate...

CVE-2017-17767

In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer...

roxysploit - Penetration Testing Suite

roxysploit is a community-supported, open-source and penetration testing suite that supports attacks for numerous scenarios. conducting attacks in the field. Some containing Plugins in roxysploit Scan is a automated Information gathering plugin it gives the user the ability to have a rest while t...