How we took part in MLSEC and (almost) won

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition MLSEC — a series of trials testing contestants ability to create and attack machine learning models. The event is comprised of two main challenges — one for attackers, and the other for defenders. The...

Google Chrome Blink improperly implemented vulnerability (CNVD-2021-84806)

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper Blink implementation. An attacker could exploit this vulnerability to abuse content security policies via crafted HTML pages...

Google Chrome iFrame Sandbox improperly implemented vulnerability

Chrome is a web browsing tool developed by Google. iFrame Sandbox is improperly implemented in versions prior to Google Chrome 95.0.4638.54. An attacker could exploit this vulnerability to bypass navigation restrictions via crafted HTML pages...

Google Chrome 访问控制错误漏洞

Google Chrome is a simple and efficient web browsing tool developed by Google. 93.0.4577.82 and earlier versions of Google Chrome contain a Blink implementation vulnerability. An attacker could exploit this vulnerability to leak cross-source data via crafted HTML pages...

PT-2021-6359

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.71 Description The issue is related to an inappropriate implementation in the File System API of Google Chrome on Windows, allowing a remote attacker to obtain potentially sensitive information via a...

GHSA-PHWJ-86VX-CFJC Cross-site scripting in Apache Jena Fuseki

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2021-60535)

Google Chrome is a web browser from Google, Inc. Google Chrome V8 has a security vulnerability that could be exploited by remote attackers to conduct potential attacks via specially crafted HTML pages using heap corruption...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-68462)

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 was previously vulnerable to resource management errors that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Google Chrome buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 previously contained a buffer overflow vulnerability that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Denial Of Service

WebGL is vulnerable to denial of service. The vulnerability exists due to a heap corruption via a crafted HTML page...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

DEBIAN-CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Design/Logic Flaw

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

UBUNTU-CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192 Display information UI XSS

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

CVE-2021-33192 is an HTML page cross-site scripting (XSS) vulnerability in Apache Jena Fuseki. The issue allows an attacker to execute arbitrary JavaScript on certain page views and affects Fuseki versions 2.0.0 through 4.0.0 (inclusive). The vulnerability is described as an HTML page vulnerabili...

Google Chrome Type Obfuscation Vulnerability (CNVD-2021-35163)

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in V8 in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability by leveraging heap corruption via specially crafted HTML pages...