CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

UBUNTU-CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

PYSEC-2017-46

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

DEBIAN-CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2015-4707

CVE-2015-4707 affects IPython prior to 3.2, where JSON error messages and the /api/notebooks REST API could trigger cross-site scripting (XSS) via URL parameters in error responses. Affected component: IPython notebook REST API. Root cause: improper handling/neutralization of data in error messag...

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

Design/Logic Flaw

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

Check Out My TeePublic Designs

Over the years fans of this blog have asked if I would consider selling merchandise with the TaoSecurity logo. When I taught classes for TaoSecurity from 2005-2007 I designed T-shirts for my students and provided them as part of the registration package. This weekend I decided to exercise my...

devel/ipython -- remote execution

Kyle Kelley reports: Summary: JSON error responses from the IPython notebook REST API contained URL parameters and were incorrectly reported as text/html instead of application/json. The error messages included some of these URL params, resulting in a cross site scripting attack. This affects use...

HP desktops and notebooks code execution

UEFI firmware code execution...

Fujitsu notebooks privilege escalation

Untrusted path to executables...

Online Notebook Manager SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Online Notebook Manager SQL Injection Vulnerability =================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Online Notebook Manager SQ...

ASUS notebooks and motherboards privilege escalations

There are multiple possibilities for user with phisical memory access to execute code in high-pribileged SMM processor mode...

Insufficient Authentication vulnerability in Acer notebooks

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Authentication уязвимости в ноутбуках Acer. Уязвимость я обнаружил 28.04.2009 на двух моих ноутбуках. На данных ноутбуках используется Windows XP Home Rus, в случае других ОС уязвимость также может присутствовать. В Windows XP Home в...

Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability

Insomnia Security Vulnerability Advisory: ISVA-080910.1 Name: MS Office OneNote URL Handling Vulnerability Released: 10 September 2008 Vendor Link: http://http://office.microsoft.com/onenote Affected Products: MS Office Onenote 2007 MS Office 2003 and 2007 have vulnerable components Original...