6749 matches found
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5997: Use After Free
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Pro-Palestinian TA402 APT Using IronWind Malware in New Attack
By Deeba Ahmed As per cybersecurity researchers at Proofpoint, the APT group TA402 operates in support of Palestinian espionage objectives, with a primary focus on intelligence collection. This is a post from HackRead.com Read the original post: Pro-Palestinian TA402 APT Using IronWind Malware in...
PT-2023-30488
Name of the Vulnerable Software and Affected Versions ThemeIsle Cloud Templates & Patterns collection versions 1.2.2 and earlier Description The issue is related to the exposure of sensitive information to an unauthorized actor. This is due to a sensitive information exposure via log file...
PT-2023-7067 · Google +5 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.159 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Garbage Collection component, which can be exploited by a remote attacker to potentiall...
Google Chrome < 119.0.6045.159 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202311stable-channel-update-for-desktop14 advisory. - Use after free in Navigation in Google Chrome prior to 119.0.6045.159...
Stable Channel Update for Desktop
The Stable channel has been updated to 119.0.6045.159 for Mac and Linux and 119.0.6045.159/.160 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 4 security fixes: 1497997 High CVE-2023-5997: Use after free in Garbage Collection. Reported by Anonymous on 2023-10-31 1499298 High CVE-2023-6112: Use after free in Navigation. Reported by Sergei Glazunov of Google Project Zero on 2023-11-04...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Themeisle Cloud_Templates_\&_Patterns_Collection
CVE-2023-47529 Cloud Templates & Patterns collection =...
collection admin can still change delegation Address by calling setCollectionCosts()
Lines of code Vulnerability details Impact Function updateDelegationCollection which update allowlist mint delegation collection prevents collection admin and any other actors from perfoming this except global and Function Admin. However, collection admin can still change delegation Address by...
No Chainlink error handling in case of ethereums gas prices increasing or subscription running out of Link.
Lines of code Vulnerability details Impact Any collections making use of the ChainLink VRF2 randomizer could potentially get 0x0 hashes for their nfts. Due to uint32 public callbackGasLimit = 40000; being hardcoded, any gas fluctuations on Ethereum main net, could potentially not be enough for th...
The reentrancy vulnerability in NextGenCore can allow an attacker to manipulate minting execution
Lines of code Vulnerability details Impact Function mintProcessing has been used in mint and airDropTokens and both doesn't follow check-effect-interaction pattern and code updates the values of tokensAirdropPerAddress, tokensMintedAllowlistAddress and tokensMintedPerAddress variables after makin...
Rocky Linux 9 : firefox (RLSA-2023:6188)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6188 advisory. - VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 - It was possible for certain browser prompts an...
Judge rules it’s fine for car makers to intercept your text messages
A federal judge has refused to bring back a class action lawsuit that alleged four car manufacturers had violated Washington state’s privacy laws by using vehicles’ on-board infotainment systems to record customers’ text messages and mobile phone call logs. The judge ruled that the practice doesn...
Pulp: Tokens stored in plaintext
A flaw exists in the collection remote for pulpansible, where tokens are stored in plaintext instead of using pulp's encrypted field. This flaw allows an attacker with sufficient privileges to read the stored tokens, resulting in the loss of confidentiality...
en.aec-collection.com Cross Site Scripting vulnerability OBB-3775399
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kernel: Linux kernel: Denial of Service due to improper io_uring/af_unix file cleanup
A flaw was found in the Linux kernel's iouring/afunix component. A local user could exploit improper handling of registered files during garbage collection. This vulnerability can lead to a memory leak, potentially causing a denial of service DoS on the system...