CVE-2019-12760

A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution...

On VBScript

Posted by Ivan Fratric, Google Project Zero Introduction Vulnerabilities in the VBScript scripting engine are a well known way to attack Microsoft Windows. In order to reduce this attack surface, in Windows 10 Fall Creators Update, Microsoft disabled VBScript execution in Internet Explorer in the...

Five easy ways to recognize and dispose of malicious emails

I suppose we all get our share of spam. Some more than others. But how do we differentiate between simple commercial spam and the types of emails that want to get us in trouble? The unsolicited commercial spam email is generally easy to recognize, report, and discard, but what about more dangerou...

From Regular Expressions to AI

Three generations of attack detection methodology The oldest and well-studied approach is based on signatures and heuristics. From before the internet times, this approach was implemented in most kinds of detection systems from firewalls to anti-viruses. The second genera- tion represents an...

brisbanegrammar.com XSS vulnerability

Open Bug Bounty ID: OBB-300441 Description| Value ---|--- Affected Website:| brisbanegrammar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brisbanegrammar.com XSS vulnerability

Open Bug Bounty ID: OBB-299650 Description| Value ---|--- Affected Website:| brisbanegrammar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

spanishuno.com XSS vulnerability

Vulnerable URL: http://spanishuno.com/grammar-lesson.asp?shelf=1=1180=1"...

YARA Denial of Service Vulnerability (CNVD-2017-08108)

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A security vulnerability exists in the libyara/grammar.y file in YARA version 3.5.0. A remote attacker could exploit this vulnerability to...

YARA Denial of Service Vulnerability (CNVD-2017-08107)

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A security vulnerability exists in the libyara/grammar.y file in YARA 3.5.0. A remote attacker could exploit this vulnerability to cause a...

UBUNTU-CVE-2017-5923

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted rule that is mishandled in the yarayyparse function...

UBUNTU-CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...

DEBIAN-CVE-2016-10211

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrparserlookuploopvariable function...

UBUNTU-CVE-2016-10211

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrparserlookuploopvariable function...

CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...

German Grammar Practice Free - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application German Grammar Practice Free published at the 'play' market has multiple vulnerabilities...

Learn German grammar A1 A2 B1 - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Learn German grammar A1 A2 B1 published at the 'play' market has multiple vulnerabilities...

German Grammar Learning - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application German Grammar Learning published at the 'play' market has multiple vulnerabilities...

German grammer Overview - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application German grammer Overview published at the 'play' market has multiple vulnerabilities...

English Grammar Test - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application English Grammar Test published at the 'play' market has multiple vulnerabilities...

German Grammar Practice - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application German Grammar Practice published at the 'play' market has multiple vulnerabilities...