Multiple Apple Products WebKit Type Obfuscation Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Apple iOS and Safari Denial of Service Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems.Safari is one of the specialized components used in the Safari browser. A...

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2018-12194)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Cross site scripting

Stored cross-site scripting XSS vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

wityCMS 0.6.1 - Cross-Site Scripting

wityCMS 0.6.1 - Cross-Site Scripting Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Date: 05/28/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link:...

wityCMS 0.6.1 Cross Site Scripting

Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Date: 05/28/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link: https://github.com/Creatiwity/wityCMS/releases/tag/0.6.1 Version: 0.6.1 Tested on:...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Apple iOS 'SavaReVIEW Controller' Component Spoofing Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and SafariViewController is one of the web browser components. A security vulnerability exists in the SafariViewController component in Apple iOS versions prior to 11.3. A remote attacker can exploit this vulnerability to gai...

Apple iOS Safari Spoofing Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Safari is a web browser component. A security vulnerability exists in the Safari component in Apple iOS versions prior to 11.3. The vulnerability can be exploited by remote attackers to gain privileges through...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-08266)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; iCloud for Windows is a Windows-based cloud service; and iTunes for Windows is a Windows-based media player application. WebKit is one of the web browser engine components. A security...

Apple Safari Address Forgery Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari is one of the specialized components used for the Safari browser.... A security vulnerability exists in the Safari component of Apple Safari versions prio...

Mozilla Firefox ESR Integer Overflow Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. An integer overflow vulnerability exists in Mozilla Firefox ESR prior to version 52.7, which arises from the program failing to detect the length of...

BOSE SoundTouch Remote Control Vulnerability

The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A security vulnerability exists in BOSE SoundTouch. A remote attacker could exploit this vulnerability with the help of a specially crafted website to achieve remote control...

Google Chrome canvas same-origin restriction bypass vulnerability

Google Chrome is a web browser developed by Google, Inc. canvas is one of the graphics components. A security vulnerability exists in canvas in versions of Google Chrome prior to 65.0.3325.146. A remote attacker can exploit this vulnerability to bypass the same-origin restriction by tricking user...

Google Chrome Skia Buffer Overflow Vulnerability (CNVD-2018-08960)

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A heap buffer overflow vulnerability exists in Skia in versions prior to Google Chrome 65.0.3325.146, which stem...

Google Chrome Information Disclosure Vulnerability (CNVD-2018-08951)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in IPC calls in versions of Google Chrome prior to 65.0.3325.146. A remote attacker can exploit this vulnerability to obtain sensitive information by tricking users into visiting a...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Apple Safari Content Forgery Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari is one of the specialized components used for the Safari browser.... A security vulnerability exists in the Safari component of Apple Safari versions prio...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-07646)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...