KLA11621 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after...

The vulnerability of the Software Guard eXtensions (SGX) processor implementation allows a hacker to enhance their privileges.

The vulnerability of the Software Guard eXtensions SGX technology for Intel processors lies in the fact that the operation exits the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Google Chrome lies in the lack of a timeout mechanism for the installation of Chrome extensions. This allows attackers to initiate the installation of malicious Chrome extensions.

The vulnerability of Google Chrome lies in the absence of a timeout for the extension installation process. Exploiting this vulnerability allows an attacker to initiate the installation of malicious Chrome extensions through a specially created HTML page...

The vulnerability of the WebBluetooth component in Google Chrome allows a malicious actor to initiate the installation of a malicious Chrome extension and gain unauthorized access to protected information.

The vulnerability of the WebBluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to initiate the installation of malicious Chrome extensions and gain unauthorized access to protected information...

DEBIAN-CVE-2019-18180

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

UBUNTU-CVE-2019-18180

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

Analysis of LooCipher, a New Ransomware Family Observed This Year

ARCHIVED STORY Analysis of LooCipher, a New Ransomware Family Observed This Year By ATR Operational Intelligence Team · December 05, 2019 Co-authored by Marc RiveroLopez. Initial Discovery This year seems to again be the year for ransomware. Notorious attacks were made using ransomware and new...

Analysis of LooCipher, a New Ransomware Family Observed This Year

ARCHIVED STORY Analysis of LooCipher, a New Ransomware Family Observed This Year By ATR Operational Intelligence Team · December 05, 2019 Co-authored by Marc RiveroLopez. Initial Discovery This year seems to again be the year for ransomware. Notorious attacks were made using ransomware and new...

PT-2019-15258 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 5.0.38 and prior OTRS Community Edition versions 6.0.23 and prior OTRS versions 7.0.12 and prior Description: The issue is related to an improper check for filenames with overly long extensions in PostMaster,...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19576

CVE-2019-19576 concerns verot.net’s class.upload.php (versions < 1.0.3 and

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

Avast and AVG Browser Extensions Spying On Chrome and Firefox Users

If your Firefox or Chrome browser has any of the below-listed four extensions offered by Avast and its subsidiary AVG installed, you should disable or remove them as soon as possible. Avast Online Security AVG Online Security Avast SafePrice AVG SafePrice Why? Because these four widely installed...

The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) encryption function in the Thunderbird email client allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of Google Chrome arises from insufficient validation of input data, allowing a hacker to replace the user’s interface in the “Extensions” tab.

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface in the “Extensions” tab using a specially created HTML page...

Kaspersky Protection extension for Google Chrome unauthorized access vulnerability

Kaspersky Protection extension for Google Chrome is a security extension for Google Chrome from the Russian laboratory Kaspersky Kaspersky. An unauthorized access vulnerability exists in Kaspersky Protection extension for Google Chrome. An attacker could exploit this vulnerability to remove other...

CVE-2019-15684

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions...

CVE-2019-15684

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions...

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...