Google Chrome DevTools Component Type Mixing Vulnerability

Google Chrome is a web browser from Google, Inc. A type-mangling vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a type-mangling issue in the DevTools component. A remote attacker could exploit this vulnerability to cause heap corruption via crafted UI...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A type-mangling vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a type-mangling issue in the DevTools component. A remote attacker could exploit this vulnerability to cause heap corruption via crafted UI...

SUSE CVE-2004-0686

Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors...

The vulnerability of the smbserver.py component in the Python3 Impacket networking module, related to name mangling for path restrictions, allows a hacker to gain access to sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the smbserver.py component in the Python3 Impacket networking module is related to incorrect processing of the "../" path. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Cross-site Scripting (XSS)

marked is vulnerable to cross-site scripting XSS attacks. The library does not properly escape URLs when mangling is disabled, allowing a malicious user to inject and execute arbitrary Javascript...

MediaWiki Multiple Vulnerabilities (Nov 2017) - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

DEBIAN-CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

Hardcoded credentials

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

CVE-2017-8811

MediaWiki is affected by CVE-2017-8811, where the raw message parameter expansion allows HTML mangling in versions prior to 1.27.4 (1.28.x before 1.28.3, 1.29.x before 1.29.2). The issue is part of a set of vulnerabilities (8811 alongside 8808, 8809, 8810, 8812, 8814, 8815) disclosed by Debian, A...

openSUSE Security Update : glibc (openSUSE-2016-1149)

This update for glibc fixes the following issues : Security issues fixed : - arm: mark startcontext as .cantunwind CVE-2016-6323, boo994359, BZ 20435 Bugs fixed : - aarch64: Merge localmultiplethreads offset with memory reference - Fix memory leak in regexp compiler BZ 17069 - Provide correct...

Mandriva Linux Security Advisory : mediawiki (MDVSA-2014:241)

Updated mediawiki packages fix security vulnerabilies : In MediaWiki before 1.23.7, a missing CSRF check could allow reflected XSS on wikis that allow raw HTML CVE-2014-9276. MediaWiki's mangling, in MediaWiki before 1.23.7, could allow an article editor to inject code into API consumers that...

Updated mediawiki packages fix security vulnerabilies

In MediaWiki before 1.23.7, a missing CSRF check could allow reflected XSS on wikis that allow raw HTML CVE-2014-9276. MediaWiki's mangling, in MediaWiki before 1.23.7, could allow an article editor to inject code into API consumers that blindly unserialize PHP representations of the page from th...

http-form-brute NSE Script

Performs brute force password auditing against http form-based authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use. The script automatically attempts...

FreeBSD : Multiple Potential Buffer Overruns in Samba (2de14f7a-dad9-11d8-b59a-00061bc2ad93)

Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the 'mangling...

GLSA-200407-21 : Samba: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-21 Samba: Multiple buffer overflows Evgeny Demidov found a buffer overflow in SWAT, located in the base64 data decoder used to handle HTTP basic authentication CAN-2004-0600. The same flaw is present in the code used to...