2285 matches found
Cross site scripting
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
PYSEC-2018-149
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
PYSEC-2018-149
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
CVE-2018-1000516
CVE-2018-1000516 concerns the Galaxy Project Galaxy version 14.10, where multiple templates fail to properly sanitize user input, enabling cross-site scripting (XSS) via crafted URLs. The root cause is CWE-79 Improper Neutralization of Input During Web Page Generation, allowing injected JavaScrip...
CVE-2018-1000516
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
Galaxy CMS Cross-Site Scripting Vulnerability
Galaxy CMS is a lightweight, fast-response request content management system based on the .NET Framework and a SQL Server database. A cross-site scripting vulnerability exists in Galaxy CMS, which could be exploited by an attacker to execute arbitrary script code in the browser of a user in the...
Samsung Galaxy Apps Activity Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling o...
(Pwn2Own) Samsung Galaxy Apps Staging Mode Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling o...
Samsung Galaxy Apps URL Handling Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy Apps. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...
Wireless GUI Android Security Assessment: Hijacker
Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng , MDK3 and Reaver . It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with an...
virginmedia.com XSS vulnerability
Open Bug Bounty ID: OBB-606169 Description| Value ---|--- Affected Website:| virginmedia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser
A critical vulnerability has been discovered in the browser app comes pre-installed on hundreds of millions of Samsung Android devices that could allow an attacker to steal data from browser tabs if the user visits an attacker-controlled site. Identified as CVE-2017-17692, the vulnerability is Sa...
Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone
By Waqas At the Mobile Pwn2Own competition 2017, white hat hackers managed This is a post from HackRead.com Read the original post: Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone...
Chain of 11 Bugs Takes Down Galaxy S8 at Mobile Pwn2Own
The mobile version of the annual Pwn2Own contest wrapped up today in Tokyo with an unprecedented attack chain leveling the Samsung Galaxy S8. Researchers from MWR Labs used 11 vulnerabilities across six different mobile applications to execute code on Samsung’s flagship device and exfiltrate data...
Samsung GALAXY Apps Privilege Access Control Vulnerability
Samsung GALAXY Apps also known as Samsung Apps, Samsung Updates or com.sec.android.app.samsungapps is a suite of app store applications from Samsung South Korea. A security vulnerability exists in versions of Samsung GALAXY Apps prior to 14120405.03.012. An attacker can exploit this vulnerability...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 23, 2017
Just like Bugs Bunny wears disguises to avert his enemies, there’s another “wascally” rabbit causing trouble in the form of ransomware. Bad Rabbit is the latest ransomware campaign hitting Eastern European countries with what looks like a variant of the Petya/NotPetya ransomware. Bad Rabbit sprea...
Broadcom: Heap overflow when handling 802.11v WNM Sleep Mode Response(CVE-2017-7065)
Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. In order to allow clients to configure...
The vulnerability of the Samsung Galaxy S4’s microprogrammed software driver allows a perpetrator to cause a service failure or gain increased privileges.
The vulnerability of the Samsung ExtDisp driver for kernel version 3.4 or earlier in the microprogramming software of the Samsung Galaxy S4 device is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory corruption or gain elevated...
