Microsoft Edge - Out-of-Bounds Access when Fetching Source Exploit

Exploit for windows platform in category dos / poc // The attached JavaScript file causes an out-of-bounds access of the source buffer when fetching the source for one of the functions during delayed compilation. The out-of-bounds value is then treated as the pointer to the source. This is likely...

Fedora 26 : php-horde-nag (2017-d1c86c61f2)

nag 4.2.15 - jan SECURITY: Fix open redirects. - mjr Fix handling of delayed start dates Bug 14634. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora 25 : php-horde-nag (2017-34d34904f5)

nag 4.2.15 - jan SECURITY: Fix open redirects. - mjr Fix handling of delayed start dates Bug 14634. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

kernel: ext4: power failure during write(2) causes on-disk information leak

A vulnerability was found in the Linux kernel where filesystems mounted with data=ordered mode may allow an attacker to read stale data from recently allocated blocks in new files after a system 'reset' by abusing ext4 mechanics of delayed allocation...

kernel: ext4: power failure during write(2) causes on-disk information leak

A vulnerability was found in the Linux kernel where filesystems mounted with data=ordered mode may allow an attacker to read stale data from recently allocated blocks in new files after a system 'reset' by abusing ext4 mechanics of delayed allocation...

Race condition

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

WebKit: UXSS via a focus event and a link element (CVE-2017-2479)

This is somewhat similar to https://crbug.com/663476. Here's a snippet of Container::replaceAllChildren. while RefPtr child = mfirstChild removeBetweennullptr, child-nextSibling, child; notifyChildNodeRemovedthis, child; If the location hash value is set, the page will give focus to the associate...

[SECURITY] Fedora 25 Update: java-1.8.0-openjdk-aarch32-1.8.0.112-3.161109.fc25

A preview release of the upstream OpenJDK AArch32 porting project. In due time it will be merged with the main java-1.8.0-openjdk package. This release may get security fixes late. Use carefully. The OpenJDK runtime environment...

[SECURITY] Fedora 24 Update: java-1.8.0-openjdk-aarch32-1.8.0.102-7.160812.fc24

A preview release of the upstream OpenJDK AArch32 porting project. In due time it will be merged with the main java-1.8.0-openjdk package. This release may get security fixes late. Use carefully. The OpenJDK runtime environment...

Questions Mount Around Yahoo Breach

As Yahoo continues to investigate the biggest data breach in history, pressure is mounting on the company to admit when it knew about the attack, whether there was a delay in reporting it, and also about how it implements cryptography to secure data it’s responsible for. Security company Venafi...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the ChromeClientImpl::createWindow method WebKit/Source/web/ChromeClientImpl.cpp of the Blink component in Google Chrome does not prevent the creation of windows using a delayed frame. Exploiting this vulnerability could allow a malicious actor to circumvent existing access...

Coinbase: Transaction Pending Via Ip Change

Hi , Wamim Here . I Normally Use my Account From My Country Ip Email But Last Some Days I Checked And Found That When I Change My Ip Before Login Or Sending that time I got Mail After The Money Send Kindly Note That From Normal Ip when You sent you received mail instant when money sent .but this...

Delayed Lock - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Delayed Lock published at the 'play' market has multiple vulnerabilities...

PHP 5.4.x < 5.4.43 / 5.5.x < 5.5.27 / 5.6.x < 5.6.11 Multiple Vulnerabilities (BACKRONYM)

Binary data 8953.prm...

Threat Outbreak Alert RuleID17700: Email Messages Distributing Malicious Software on September 2, 2015

Medium Alert ID: 40822 First Published: 2015 September 2 20:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17700 may contain the following files: Name |...

Netflix Sleepy Puppy Cross-Site Scripting Payload Framework

Most automated scanning and security tools that ferret out cross-site scripting vulnerabilities don’t do much analysis beyond the target application. Netflix this week, however, released to open source a tool developed in-house that persists beyond the target app and can flag potential XSS troubl...

Multiple Flaws Exposed in Pocket Add-on for Firefox

With providing easy accessibility, the battle is not won! Server-side Vulnerabilities have been reported by a security researcher in the popular Pocket add-on that comes attached with the Firefox browser. The security flaws could have allowed hackers to exfiltrate data from the company’s servers ...

FreeBSD : php -- arbitrary code execution (5a1d5d74-29a0-11e5-86ff-14dae9d210b8)

cmb reports : When delayed variable substitution is enabled can be set in the Registry, for instance, !ENV! works similar to %ENV%, and the value of the environment variable ENV will be subsituted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

InVision: Enumeration and Guessable Email (OWASP-AT-002)T hrough Login Form

Delayed resolution due to changes in our program., public disclosure ok...

GNOME Shell security, bug fix, and enhancement update

clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...