[SECURITY] Fedora 24 Update: oxygen-icon-theme-5.24.0-1.fc24

Oxygen icon theme...

[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 integration module with icon themes...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the integrity and accessibility of protected information

The vulnerability exists in Mozilla Firefox due to an incorrect limitation on event handling, which replaces events related to configuration changes. Exploiting this vulnerability allows malicious actors to remotely alter the positions of icons on the user interface by using specially crafted...

Nextcloud: Stored XSS on Share-popup of a directory's Gallery-view

Hi, Nice with the program launch! Congrats! I noticed that there was a Share-icon when toggling to the Gallery-view of a directory under "Nextcloud Files": F99938 If your directory has a malicious name such as a HTML-payload: , this HTML will run when clicking on the Share-icon: F99937 I see that...

ImageMagick: Integer and buffer overflow in coders/icon.c

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-704)

This update to Mozilla Firefox 47 fixes the following issues boo983549 : Security fixes : - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free...

Security update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 47 fixes the following issues boo983549: Security fixes: - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free deletin...

Shopify: Fetching external resources through svg images

Hi, I found the exactly same bug 97501 at https://app.shopify.com/services/partners/apiclients/ when uploading the svg image on app icon. Steps to reproduce it + Make a new app at https://app.shopify.com/services/partners/apiclients + Goto app setting...

Icon Pop Song - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Icon Pop Song published at the 'play' market has multiple vulnerabilities...

Icon Game: Guess the Pic - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Icon Game: Guess the Pic published at the 'play' market has multiple vulnerabilities...

Dynamic Animated weather icon - Dangerous filesystem permissions, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Dynamic Animated weather icon published at the 'play' market has multiple vulnerabilities...

Glim - Free Flat Icon Pack - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glim - Free Flat Icon Pack published at the 'play' market has multiple vulnerabilities...

Creat Icon - Icon Play - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Creat Icon - Icon Play published at the 'play' market has multiple vulnerabilities...

Glasklart - Icon Pack - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Glasklart - Icon Pack published at the 'play' market has multiple vulnerabilities...

Leitz Icon Software - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Leitz Icon Software published at the 'play' market has multiple vulnerabilities...

Memory Corruption Vulnerability in PhotoLine's Handling of ICO Files

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the ICO format, which can be exploited by an attacker to construct malformed ICO files that can crash the program and cause a denial of service condition...

Microsoft .NET Framework WinForms Information Disclosure Vulnerability

WinForms a.k.a. Microsoft Windows Forms is a smart client component of the .NET Development Framework from the United States Microsoft Microsoft and part of the graphical user interface of the . It provides access to Windows native native components by encapsulating existing Windows APIs Win32 AP...

CVE-2016-0047

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

Information disclosure

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

IBM Tealeaf Customer Experience Information Disclosure Vulnerability

IBM Tealeaf Customer Experience is a SaaS-based analytics solution for web and mobile applications from IBM USA. The solution helps clients understand and improve the overall user experience through the analysis of data, supporting rich visualization and data exploration through the adoption of...