10274 matches found
The vulnerability of Google Chrome’s browser allows a violator to bypass mechanisms designed to protect the integrity of subresources.
The vulnerability of the PendingScript::notifyFinished function in Google Chrome’s WebKit/Source/core/dom/PendingScript.cpp is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass Subresource Integrity SRI protection mechanisms by...
he.net - Network Tools - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application he.net - Network Tools published at the 'play' market has multiple vulnerabilities...
Microsoft Windows Library Load Input Validation Remote Code Execution Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Vista SP2 and Server 2008 SP2, which stems from a program's failure to properly validate input before loading certain libraries. A remot...
CVE-2016-0100
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...
Remote code execution
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...
CVE-2016-0100
CVE-2016-0100 is a local-privilege-escalation vulnerability in Microsoft Windows (Vista SP2 and Server 2008 SP2) caused by mishandling library loading. A crafted application could leverage improper input validation during library loading to gain elevated privileges. The issue is fixed by MS16-025...
CVE-2016-0100
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...
Microsoft Windows Library Loading Remote Code Execution Vulnerability (3140709)
This host is missing an important security update according to Microsoft Bulletin MS16-025. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Lobotomy - Android Reverse Engineering Framework & Toolkit
Lobotomy is an Android security toolkit that will automate different Android assessments and reverse engineering tasks. The goal of the Lobotomy toolkit is to provide a console environment, which would allow a user to load their target Android APK once, then have all the necessary tools without...
MS16-025: Security Update for Windows Library Loading to Address Remote Code Execution (3140709)
The remote Windows host is affected by a remote code execution vulnerability due to improper validation of input before loading certain libraries. An authenticated, remote attacker can exploit this, via a specially crafted application, to execute arbitrary code. C Tenable Network Security, Inc...
Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly validates input before loading libraries. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...
chromium-browser: SRI Validation Bypass
The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity...
Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (Mac OS X)
The version of Wireshark installed on the remote Mac OS X host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace fil...
Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace file...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...
The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.
The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...
Banelco MÓVIL - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Banelco MÓVIL published at the 'play' market has multiple vulnerabilities...
infinitiq - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities
HackApp vulnerability scanner discovered that application infinitiq published at the 'play' market has multiple vulnerabilities...
Viking App Poland (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Viking App Poland Official published at the 'play' market has multiple vulnerabilities...
Viking App (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Viking App Official published at the 'play' market has multiple vulnerabilities...