194 matches found
Design/Logic Flaw
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site...
CVE-2020-9545
CVE-2020-9545 affects Pale Moon 28.x prior to 28.8.4. The vulnerability is a segmentation fault related to the module scripting subsystem, demonstrated by a Lacoste site. Multiple connected sources (NVD, Red Hat advisory references, and vendor records) confirm the same description. No root-cause ...
CVE-2020-9545
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site...
moon-circle.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1090098 Security Researcher geeknik Helped patch 8664 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting moon-circle.com website an...
moon-trade.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1069808 Security Researcher Rbcafe Helped patch 258 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting moon-trade.ru website and its...
A week in security (July 8 – 14)
Last week on Malwarebytes Labs, we looked at ways to send your sensitive information in a secure fashion, examined some tactics in incident response land, and explored federal data privacy law. We also looked at how security tools can turn against you, and took a deep dive into the rather fiendis...
Pale Moon Browser 27.9.3 - Use After Free (PoC)
Pale Moon Browser 27.9.3 - Use After Free PoC Exploit Title: Pale Moon Browser function SetVariablefuzzervars, varname, vartype fuzzervarsvartype = varname; function jsfuzzer var var1 = var2.getDistributedNodes; SetVariablevar1, 'NodeList';...
Pale Moon Browser Use-After-Free
Exploit Title: Pale Moon Browser function SetVariablefuzzervars, varname, vartype fuzzervarsvartype = varname; function jsfuzzer var var1 = var2.getDistributedNodes; SetVariablevar1, 'NodeList';...
Pale Moon Browser < 27.9.3 - Use After Free (PoC)
Exploit Title: Pale Moon Browser function SetVariablefuzzervars, varname, vartype fuzzervarsvartype = varname; function jsfuzzer var var1 = var2.getDistributedNodes; SetVariablevar1, 'NodeList';...
Pale Moon Browser < 27.9.3 - Use After Free Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Pale Moon Browser function SetVariablefuzzervars, varname, vartype fuzzervarsvartype = varname; function jsfuzzer var var1 = var2.getDistributedNodes; SetVariablevar1, 'NodeList'; 0day.today 2018-06-18...
Pale Moon Memory Misreference Vulnerability
Pale Moon is a browser optimized for Firefox Firefox, which is mainly designed to improve the speed of Firefox. A memory misreference vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon versions prior to 27.9.3. No details of the vulnerability are provided at this time...
CVE-2018-12292
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3...
CVE-2018-12292
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3...
Design/Logic Flaw
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3...
CVE-2018-12292
CVE-2018-12292 affects Pale Moon prior to 27.9.3, with a use-after-free in DOMProxyHandler::EnsureExpandoObject. The vulnerability can enable memory corruption and reliability issues in the affected browser build. Exploitation details are provided in public PoC/exploit descriptions for Windows (e...
CVE-2018-12292
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3...
banana-moon-clothing.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-560836 Description| Value ---|--- Affected Website:| banana-moon-clothing.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...
FreeBSD : palemoon -- multiple vulnerabilities (5044bd23-08cb-11e8-b08f-00012e582166)
Pale Moon reports : CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrin...
moon-walker.iteye.com XSS vulnerability
Open Bug Bounty ID: OBB-539725 Description| Value ---|--- Affected Website:| moon-walker.iteye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
