1009 matches found
Acknowledgement of Attacks Leveraging Microsoft Zero-Day
FireEye recently detected malicious Microsoft Office RTF documents that leverage a previously undisclosed vulnerability. This vulnerability allows a malicious actor to execute a Visual Basic script when the user opens a document containing an embedded exploit. FireEye has observed several Office...
GitLab: [Repository Import] Open Redirect via "continue[to]" parameter
Hi, While experimenting with Repository Import functionality on a fresh GitLab 9.0 CE install, I noticed that the continueto parameter can be used to perform an Open Redirect through the inclusion of a double-slash prefix. Proof of Concept The following Proof of Concept URL enables a malicious...
The vulnerability of Google Chrome browser allows a perpetrator to gain access to local files.
The vulnerability of the Histogram component in Google Chrome browser is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to gain access to local files through a specially crafted HTML page...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of NVIDIA’s Android operating system video driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Audioserver component of the libeffects sub-component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Flash Player software platform, which allows a violator to bypass the security measures
The vulnerability of the Flash Player software is related to the implementation of domain restriction rules. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Safari browser allows a hacker to circumvent existing restrictions on sending requests.
The vulnerability of the WebKit Plug-ins component of the Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing restrictions on sending requests through a specially crafted website...
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data...
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data...
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the integrity and accessibility of data.
The vulnerability of the Java Platform software platform allows a malicious actor to compromise the integrity and accessibility of data by using the Tools component...
Firefox browser vulnerabilities that allow a malicious actor to trigger a service failure
The numerous vulnerabilities of the Firefox browser allow malicious actors to trigger service failures memory errors and unexpected application shutdowns or execute arbitrary code...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libuim-nox-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...
Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability in Adobe AIR allows an attacker to execute arbitrary code or cause a service failure a memory-related error...
The vulnerability of the Apache Qpid message exchange system, which allows a malicious actor to gain access as a legitimate user.
The Apache Qpid system for exchanging programmatic messages contains a vulnerability related to an authentication error during the processing of shadowed connections for AMQP clients. With a specially crafted request, a malicious individual can impersonate a legitimate user...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure
Cisco IOS software contains numerous implementation errors in the Session Initiation Protocol SIP. When these errors are exploited during operation, a fault with ID CSCth03022 can be triggered, along with a “service failure” of the router...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure or otherwise affect the system.
A vulnerability in the Google Chrome browser, related to errors in Google V8 JavaScript. Exploiting this vulnerability allows a malicious actor to trigger a service failure or cause other adverse effects on the system...
The vulnerability of the Jrockit software platform allows a malicious individual to compromise data confidentiality and integrity.
The vulnerability of the Jrockit platform, related to its subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the Beans subcomponent...