CVE-2024-5274

CVE-2024-5274 authors: @mistymntncop, @buptsb Shoutout to @buptsb for his major contribution of discovering both the DCHECK bytecode mismatch POC and then discovering how to elevate that primitive to more powerful OOB read/write primitives. Without him this exploit would not be possible :- based ...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 ITW case Explain Using PreviousMode overwrite primitive https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Thanks to chompie Google Project 0...

Exploit for Type Confusion in Google Chrome

CVE-2024-5274 authors: @mistymntncop, @buptsb Shoutout to @bup...

Exploit for Type Confusion in Google Chrome

Exploit for CVE-2022-4262 ===================== - Official Chrom...

itw-fasteners.de Cross Site Scripting vulnerability OBB-3497201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

itw-fasteners.es Cross Site Scripting vulnerability OBB-3497202

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control...

End of Life for Internet Explorer 8, 9 and 10

Microsoft has started the year with an announcement that, effective Jan. 12, 2016, support for all older versions of Internet Explorer IE will come to an end known as an EoL, or End of Life. The affected versions are Internet Explorer 7, 8, 9, and 10. What this means for users is that Microsoft...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0897-1)

update to 1.3.2 bnc815596 - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin is...

Fedora 19 : icedtea-web-1.3.2-0.fc19 (2013-5877)

New in release 1.3.2 2013-04-17 : - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin...