CVE-2016-5135

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...

[SECURITY] Fedora 24 Update: kernel-4.6.4-301.fc24

The kernel meta package...

[SECURITY] Fedora 23 Update: kernel-4.6.4-201.fc23

The kernel meta package...

Whisper: Stored XSS in wis.pr

Hi, I detected a Stored XSS in wis.pr. These are the steps to reproduce the bug: 1. Create a new group named: Test"alert'test'; 2. Copy the sharing URL http://wis.pr/. 3. Open this URL in a browser. Please find the attached screenshots. Fix: Sanitize the output in twitter:description meta. Please...

[SECURITY] Fedora 23 Update: kernel-4.5.7-202.fc23

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.5.7-300.fc24

The kernel meta package...

[SECURITY] Fedora 23 Update: kernel-4.5.7-200.fc23

The kernel meta package...

[SECURITY] Fedora 22 Update: kernel-4.4.13-200.fc22

The kernel meta package...

Microsoft Internet Explorer 11 XSS Filter Bypass

Vulnerability: IE 11 XSS Filter Bypass Impact: Moderate Authors: Rafay Baloch Company: RHAInfoSec Website: http://rafayhackingarticles.net version: Latest Description Internet explorer 11 Suffers from a XSS Filter bypass using cp1025 charset. This is highly effective when the charset has not been...

[SECURITY] Fedora 23 Update: kernel-4.5.6-200.fc23

The kernel meta package...

The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure

The vulnerability of the phppgsqlmetadata function pgsql.c in the PostgreSQL interpreter for PHP is related to errors during the checking of table names. Exploiting this vulnerability allows a malicious actor to cause service failure such as deallocation of memory or termination of the applicatio...

[SECURITY] Fedora 22 Update: kernel-4.4.10-200.fc22

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.5.4-300.fc24

The kernel meta package...

[SECURITY] Fedora 23 Update: kernel-4.4.9-300.fc23

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.5.3-300.fc24

The kernel meta package...

[SECURITY] Fedora 22 Update: kernel-4.4.8-200.fc22

The kernel meta package...

Debian DSA-3562-1 : tardiff - security update

Several vulnerabilities were discovered in tardiff, a tarball comparison tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-0857 Rainer Mueller and Florian Weimer discovered that tardiff is prone to shell command injections via shell...

[SECURITY] Fedora 23 Update: kernel-4.4.8-300.fc23

The kernel meta package...

[SECURITY] Fedora 24 Update: git-2.7.4-1.fc24

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

The vulnerability of the WildFly application server in Java, which allows a hacker to read confidential files

The vulnerability of the WildFly application server in Java relates to the use of an incomplete blacklist. Exploiting this vulnerability allows a malicious actor to read confidential files in the WEB-INF or META-INF directories by using a query containing lowercase characters or “ meaningless”...