Chrome: V8: Integer overflow with PropertyArray

Here's a snippet of the MigrateFastToFast function which is used to create a new PropertyArray object. int numberoffields = newmap-NumberOfFields; int inobject = newmap-GetInObjectProperties; int unused = newmap-UnusedPropertyFields; ... int totalsize = numberoffields + unused; int external =...

Chrome V8 - 'PropertyArray' Integer Overflow

/ Here's a snippet of the MigrateFastToFast function which is used to create a new PropertyArray object. int numberoffields = newmap-NumberOfFields; int inobject = newmap-GetInObjectProperties; int unused = newmap-UnusedPropertyFields; ... int totalsize = numberoffields + unused; int external =...

Linux kernel null pointer dereference vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in the rdsrdmamap function in net/rds/rdma.c in Linux kernels prior t...

Chrome V8 TranslatedState::MaterializeCapturedObjectAt Caching Bug

Chrome: V8: TranslatedState::MaterializeCapturedObjectAt caching bug Here'a snippet of TranslatedState::MaterializeCapturedObjectAt. case JSSETKEYVALUEITERATORTYPE: case JSSETVALUEITERATORTYPE: Handle object = Handle::cast isolate-factory-NewJSObjectFromMapmap, NOTTENURED; Handle properties =...

Google V8 Out of Bounds Write 'Array.prototype.map' Built-in Denial of Service Vulnerability

Google V8 is a Web browser developed by the American company Google Google. A denial of service vulnerability exists built into Google V8 Out of Bounds Write 'Array.prototype.map'. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-16769

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

Design/Logic Flaw

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

ZH Yandex Map, 6.2.1.0, SQL Injection

ZH Yandex Map from zhuk.cc, versions 6.2.1.0 and previous, SQL Injection Resolution: update to version 6.3.1.0 Update notice: http://zhuk.cc/2018/02/21/zh-yandexmap-security-update-2/...

CVE-2018-6396

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=formmarkers action, or the map parameter in a layout=default action...

CVE-2018-6396

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=formmarkers action, or the map parameter in a layout=default action...

Sql injection

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=formmarkers action, or the map parameter in a layout=default action...

CVE-2018-6396

The CVE-2018-6396 entry concerns Joomla! Google Map Landkarten (component) versions up to 4.2.3. Affected: Google Map Landkarten for Joomla!, through gm_markers (layout=form_markers) using cid/id and through layout=default (map parameter). Root cause: SQL Injection in the handling of these parame...

CVE-2018-6396

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=formmarkers action, or the map parameter in a layout=default action...

Joomla! Google Map Landkarten 4.2.3 SQL Injection

Exploit Title: Joomla! Component Google Map Landkarten cmslitedoct' http://localhost/Joomla375/index.php?option=comgmap&view=gmmarkers&tm...

Joomla Google Map Landkarten 4.2.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/...

Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection

Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Software Download:...

Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection

Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomla-24.de/ Software Link:...

CVE-2018-6582

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

VK.com: Reflected XSS в m.vk.com

XSS в поиске по карте...

DEBIAN-CVE-2018-6412

In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands...