CVE-2016-0100

CVE-2016-0100 is a local-privilege-escalation vulnerability in Microsoft Windows (Vista SP2 and Server 2008 SP2) caused by mishandling library loading. A crafted application could leverage improper input validation during library loading to gain elevated privileges. The issue is fixed by MS16-025...

Microsoft Windows Library Loading Remote Code Execution Vulnerability (3140709)

This host is missing an important security update according to Microsoft Bulletin MS16-025. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Lobotomy - Android Reverse Engineering Framework & Toolkit

Lobotomy is an Android security toolkit that will automate different Android assessments and reverse engineering tasks. The goal of the Lobotomy toolkit is to provide a console environment, which would allow a user to load their target Android APK once, then have all the necessary tools without...

Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly validates input before loading libraries. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...

MS16-025: Security update for Windows library loading to address remote code execution: March 8, 2016

None None...

MS16-025: Security Update for Windows Library Loading to Address Remote Code Execution (3140709)

The remote Windows host is affected by a remote code execution vulnerability due to improper validation of input before loading certain libraries. An authenticated, remote attacker can exploit this, via a specially crafted application, to execute arbitrary code. C Tenable Network Security, Inc...

chromium-browser: SRI Validation Bypass

The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity...

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.2 advisory. - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp in...

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.2 advisory. - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp...

The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.

The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

Banelco MÓVIL - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Banelco MÓVIL published at the 'play' market has multiple vulnerabilities...

infinitiq - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application infinitiq published at the 'play' market has multiple vulnerabilities...

Viking App Poland (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Viking App Poland Official published at the 'play' market has multiple vulnerabilities...

Viking App (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Viking App Official published at the 'play' market has multiple vulnerabilities...

GServiceFix - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GServiceFix published at the 'play' market has multiple vulnerabilities...

Control CSS loading with custom properties

Last week I wrote about a simple method to load CSS progressively, and on the very same day some scientists taught gravity how to wave. Coincidence? Yes. The pattern in the previous post covers the 90% case of multi-stage CSS loading, and it's really simple to understand. But would you like to he...

The vulnerability of the iOS operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the MobileStorageMounter component in the iOS operating system is related to deficiencies in the loading of trusted cache. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

The vulnerability of the Java Platform software platform allows a perpetrator to load arbitrary files onto a computer.

The vulnerability of the Java Platform-related software platform is associated with the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to download arbitrary files onto a computer by transmitting links to those files at the time of application installati...

The future of loading CSS

Chrome is intending to change the behaviour of , which will be noticeable when it appears within . The impact and benefits of this aren't clear from the blink-dev post, so I wanted to go into detail here. Update: This is now in Chrome Canary. The current state of loading CSS …content… CSS blocks...