CVE-2021-43053 TIBCO FTL Secret Exposure Vulnerability

The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another...

Google Android Input Validation Error Vulnerability (CNVD-2022-06151)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android 11 is vulnerable to an input validation error, which stems from a network system or product that does not properly validate input data. No details of the vulnerability are currently available...

Google Android Information Disclosure Vulnerability (CNVD-2022-05475)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain sensiti...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-14878)

Google Chrome is a Web browser from Google, Inc. A security feature vulnerability exists in Google Chrome, which stems from an incorrect implementation of the product's Compositing feature. A remote attacker could exploit the vulnerability to create a specially designed web page, tricking victims...

Google Android out-of-bounds write vulnerability (CNVD-2022-06897)

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android that could be exploited by attackers to remotely elevate privileges without additional executive privileges...

Google Chrome Browser UI security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Browser UI, which can be exploited by attackers to bypass security restrictions...

Google Chrome Media streams API buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in the Google Chrome Media streams API, which can be exploited by remote attackers to overflow the buffer and execute arbitrary code on the system, or cause the application to crash...

Google Chrome Autofill code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Autofill, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...

Google Chrome Web Serial security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Web Serial, which can be exploited by attackers to bypass security restrictions...

Apache Avro Resource Management Error Vulnerability

Apache Avro is a data serialization system from the Apache Foundation, Inc. A resource management error vulnerability exists in Apache Avro, which stems from the product's .net SDK component not effectively limiting the amount of allocated resources. An attacker could allocate too many resources ...

Norton 360 Now Comes With a Cryptominer

Norton 360, one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers computers. Nortons parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme -- in which the company...

Google Android Kernel elevation of privilege vulnerability (CNVD-2022-01773)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write due to improper locking in the dwc3gadgetep0queue of ep0.c. An attacker could use this...

Google Android Kernel elevation of privilege vulnerability (CNVD-2022-01771)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write in periodicioworkfunc in lwisperiodicio.c due to reuse after release. An attacker can exploit...

Safari Montage 8.5 Cross Site Scripting

Exploit Title: SAFARI Montage 8.5 - Reflected Cross Site Scripting XSS Date: 28/12/2021 Exploit Author: Momen Eldawakhly - Cyber Guy - Resecurity Inc Vendor Homepage: https://www.safarimontage.com/ Version: 8.3 and 8.5 Tested on: Ubuntu Linux Firefox CVE: CVE-2021-45425 Proof of Concept: GET...

Google Android Kernel Information Disclosure Vulnerability (CNVD-2022-01770)

Google Android is a Linux-based open source operating system from Google, Inc. The vulnerability stems from a kernel information leak in doiptgetctl and doiptsetctl of iptables.c due to uninitialized data. An attacker could exploit this vulnerability to cause an information leak...

Unspecified Vulnerability in ForeScout SecureConnector

ForeScout SecureConnector is a network security software from US-based ForeScout that authenticates machines trying to join a network. A security vulnerability exists in ForeScout SecureConnector, which can be exploited by an attacker to cause a buffer overflow and overwrite a stack cookie,...

CVE-2021-44161 Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection

Changing MOTP Mobile One Time Password system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication...

Google Android Buffer Overflow Vulnerability (CNVD-2021-103424)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

Google Android Information Disclosure Vulnerability (CNVD-2021-103436)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which can be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Information Disclosure Vulnerability (CNVD-2021-103438)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...