The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The use of this feature after deregistration through the MutationObserver::disconnect method in the core/dom/MutationObserver.cpp implementation of the object-based document model in Google Chrome’s Blink browser allows a malicious actor to trigger service interruptions or exert other effects on...

CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggerin...

UBUNTU-CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggerin...

Juniper Junos SRX Series 'log-out-on-disconnect' Persistent Admin Access (JSA10672)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by an administrative access vulnerability due to a flaw in the 'log-out-on-disconnect' feature after a reboot. This can allow an attacker with physical access to the device to gain administrative...

Unspecified Vulnerability in Juniper Networks Junos on SRX Series

Juniper Networks Junos on SRX Series devices is a Juniper Networks network operating system that runs on SRX Series Services Gateway devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos in the SRX Series...

CVE-2015-3002

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect feature when configured in the system port console stanza, which allows physically proximate...

CVE-2015-3002

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect feature when configured in the system port console stanza, which allows physically proximate...

CVE-2015-3002

CVE-2015-3002 describes a local security issue in Juniper Junos on SRX Series devices where the log-out-on-disconnect feature is not properly enforced when configured in the system port console stanza. The vulnerability enables a physically proximate attacker who has access to the console port to...

KLA10541 Multiple vulnerabilities in Juniper Junos

Multiple serious vulnerabilities have been found in Juniper Junos. Malicious users can exploit these vulnerabilities to gainprivileges, execute arbitrary code orspoof user interface. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via unspecified vectors...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

Google Engineers Critical Aviator Browser Privacy, Security

Within hours on Thursday of WhiteHat Security releasing its Aviator browser to open source, a remote code execution vulnerability was disclosed, along with a handful of other coding issues that Google security engineers said jeopardized the security and privacy of Aviator’s users. Google’s public...

RBS Change Complet Open Source Cross Site Request Forgery

Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link: http://www.rbschange.fr/addons/distributions/RBS-Change-complet-Open-Source,67203.html Version: 3.6.8...

Fedora 21 : nodejs-0.10.32-1.fc21 / v8-3.14.5.10-14.fc21 (2014-11132)

This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please s...

Robert Hansen on Aviator and the $250,000 Security Guarantee

Dennis Fisher talks with Robert Hansen of WhiteHat Security about the company’s decision to change default search providers in their Aviator browser to Disconnect and the $250,000 guarantee for users of the Sentinel Elite product. ​Download: Robert Hansen on Aviator, Search Revenue and the $250,0...

Design/Logic Flaw

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...

Moving From Do Not Track to Can Not Track

NEW YORK–The movement in the security and privacy communities to push the Do Not Track standard as an answer to the problem of pervasive online tracking by ad companies and other entities has resulted in the major browser vendors including DNT as an option for users, giving them a method for...

OSX VPN Manager

This module lists VPN connections and tries to connect to them using stored credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX VPN Manager', 'Description' = %q This module lists V...

ShareKM - Remote Denial of Service

source: https://www.securityfocus.com/bid/62586/info ShareKM is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the server to crash or disconnect, denying service to legitimate users. ShareKM 1.0.19 is vulnerable; prior versions may also be affected...

ShareKM - Remote Denial of Service

ShareKM - Remote Denial of Service source: https://www.securityfocus.com/bid/62586/info ShareKM is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the server to crash or disconnect, denying service to legitimate users. ShareKM 1.0.19 is vulnerable; prior...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2605)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...