9843 matches found
WordPress: Clickjacking mercantile.wordpress.org
A Clickjaking Issue had been previously reported by "giantfire" on Aug 9th 19 days ago and the issue was fixed by "iandunn" on Aug 25th 3 days ago and the same disclosed on Aug 28th. Here the affected URL is- https://mercantile.wordpress.org/ "iandunn closed the report and changed the status to...
PT-2017-2946
Name of the Vulnerable Software and Affected Versions WPA2 affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within the Wi-Fi network's range can exploit this to access encrypt...
PT-2017-2940
Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified Description The issue is related to the management of cryptographic keys in the WPA2 protocol, which secures Wi-Fi networks. It allows an attacker within radio range to exploit the vulnerability by...
PT-2017-5442
Name of the Vulnerable Software and Affected Versions: FFmpeg version 1.1.4 Description: The issue is related to the vp3 decode frame function, which incorrectly moves threads check out of header packet type check. Recommendations: For FFmpeg version 1.1.4, consider updating to a newer version th...
WordPress: Wordpress 4.8.1 - Rogue editor leads to RCE. And the risks of same origin frame scripting in general
Background This report is mainly about how a user with the role of editor, expectedly can post unfiltered content but unexpectedly can pwn an administrator with a RCE chain due to same origin frame scripting. Secondarily the report wants to highlight the technique used and the severity of it...
CVE-2015-7516
ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service NULL pointer dereference and switch disconnect by sending two Ethernet frames with ethertype Jumbo Frame 0x8870...
CVE-2015-7516
ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service NULL pointer dereference and switch disconnect by sending two Ethernet frames with ethertype Jumbo Frame 0x8870...
CVE-2015-7516
CVE-2015-7516 affects ONOS before 1.5.0 when using the ifwd app. A remote attacker can cause a denial of service by sending two Ethernet frames with ether_type 0x8870, triggering a NULL pointer dereference and switch disconnect. The available documents describe the impact as DoS but do not specif...
Mozilla: Use-after-free with image observers (MFSA 2017-19)
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
PT-2017-7209
Name of the Vulnerable Software and Affected Versions ONOS versions prior to 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and switch disconnect, by sending two Ethernet frames with ether type Jumbo Frame 0x8870...
CVE-2015-7516: NULL Pointer Dereference
ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service NULL pointer dereference and switch disconnect by sending two Ethernet frames with ethertype Jumbo Frame 0x8870...
MyDoomScanner 1.00 SEH Overwrite Proof Of Concept
!/usr/bin/python Exploit Title : MyDoomScanner1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Anurag Srivastava Email : [email protected] Website : http://pyramidcyber.com/ Discovery Date : 17/08/2017 Software Link :...
UBUNTU-CVE-2017-12855
Xen maintains the GTFread,writing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the...
CVE-2017-12855
CVE-2017-12855 affects Xen grant table handling: premature clearing of GTF_writing/GTF_reading bits can misinform a guest that a grant is no longer in use, potentially allowing reuse of a granted frame containing sensitive data while the other domain is still using it. Affected Xen versions inclu...
PT-2017-12729
Name of the Vulnerable Software and Affected Versions Xen versions 4.5 through 4.9 Description The issue arises when Xen incorrectly clears the status bits too early, informing the guest that a grant is no longer in use. This can lead to a guest prematurely reusing a granted frame that still...
Mozilla: Use-after-free with image observers (MFSA 2017-19)
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
CVE-2017-7808
A content security policy CSP "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox 55...
UBUNTU-CVE-2017-7808
A content security policy CSP "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox 55...
CVE-2017-7784
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
UBUNTU-CVE-2017-7784
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...