2252 matches found
Microsoft Edge Chakra PathTypeHandlerBase::SetAttributesHelper Type Confusion
Microsoft Edge: Chakra: Type confusion with PathTypeHandlerBase::SetAttributesHelper CVE-2018-8384 Here's a snippet of PathTypeHandlerBase::SetAttributesHelper. PathTypeHandlerBase predTypeHandler = this; DynamicType currentType = instance-GetDynamicType; while predTypeHandler-GetPathLength...
Storefront 3.12 - Unable to start any of the Citrix services
Event ID 304 and 307 registered as error stating that User device registration error. Also we get below mentioned error:...
Libpango 1.40.8 - Denial of Service (PoC)
Libpango 1.40.8 - Denial of Service PoC Exploit Title: Libpango 1.40.8 - Denial of Service PoC Date: 2018-08-06 Exploit Author: Jeffery M Vendor Homepage: https://www.pango.org/ Software Link: http://ftp.gnome.org/pub/GNOME/sources/pango/1.40/pango-1.40.9.tar.xz Version: 1.40.8+ Tested on: Window...
Security Bulletin: IBM MQとIBM MQアプライアンス において、本来なら失敗するべきMQOPEN 呼び出しが成功する可能性があります。(CVE-2017-1341 )
Summary リモートで定義されたMQオブジェクトに一致する汎用プロファイル権限を使用しているときに、本来なら失敗するべきMQOPEN 呼び出しが成功する可能性があります。 最新情報はオリジナルの技術文書（英文）をご参照ください。 http://www.ibm.com/support/docview.wss?uid=swg22005400 Vulnerability Details CVEID: CVE-2017-1341 DESCRIPTION: IBM WebSphere...
CVE-2016-10535
csrf-lite is a cross-site request forgery protection library for framework-less node sites. csrf-lite uses ===, a fail first string comparison, instead of a time constant string comparison This enables an attacker to guess the secret in no more than 1618288 guesses, instead of the 16^18 guesses...
CVE-2016-10535
csrf-lite is a cross-site request forgery protection library for framework-less node sites. csrf-lite uses ===, a fail first string comparison, instead of a time constant string comparison This enables an attacker to guess the secret in no more than 1618288 guesses, instead of the 16^18 guesses...
Cross site request forgery (csrf)
csrf-lite is a cross-site request forgery protection library for framework-less node sites. csrf-lite uses ===, a fail first string comparison, instead of a time constant string comparison This enables an attacker to guess the secret in no more than 1618288 guesses, instead of the 16^18 guesses...
UBUNTU-CVE-2017-17689
The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL...
Chrome V8 JIT JSBuiltinReducer::ReduceObjectCreate NULL Check Fail
Chrome: V8: JIT: JSBuiltinReducer::ReduceObjectCreate fails to ensure that the prototype is "null" I think this commit has introduced the bug. https://chromium.googlesource.com/v8/v8/+/ff7063c7d5d8ad8eafcce3da59e65d7fe2b4f915%5E%21/F2 According to the description, Object.create is supposed to be...
Microsoft Edge Chakra JIT CallRegExSymbolFunction Return Check Fail Exploit
Exploit for windows platform in category dos / poc Microsoft Edge: Chakra: JIT: CallRegExSymbolFunction doesn't check the return type The "CallRegExSymbolFunction" method is used to call symbol functions in regexp objects. But it doesn't check the return value's type. Since the user can define th...
[SECURITY] Fedora 26 Update: mongodb-3.4.10-1.fc26
Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...
The seven most colossal data breaches of 2017
By Logan Strain If it seems like the words “leak,” “compromised data,” and “breach” are constantly in the news, it’s not just you. The frequency of major data breaches is increasing. According to the Identity Theft Resource Center, the number of breaches is expected to top 1,500 in 2017. That’s a...
CVE-2017-12281: Improper Authentication
A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...
Denial of service
When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...
CVE-2017-10619 Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets
When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...
'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists' App Layering/Unidesk 2.x: Desktop Task Fails
Desktop edit fails with 'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists'. Note, "A configuration error exists" could also apply to an inconsistent snapshot configuration on the VM, so see this KB article as well...
Security Apps Fail to Detect Malware Threats Due to Windows Kernel Bug
By Waqas According to security researchers, there is a decade old bug This is a post from HackRead.com Read the original post: Security Apps Fail to Detect Malware Threats Due to Windows Kernel Bug...
CVE-2017-12213
A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...
CVE-2017-12213: Improper Authentication
A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...