UBUNTU-CVE-2017-5454

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird 52.1,...

Mozilla Firefox webkitdirectory local files disclosure (CVE-2017-5414)

I have reported three different bugs to Mozilla in the webkitdirectory feature. Luckily the folder picker was only implement in Mozilla's Nightly browser, which is meant to test out new features before landing in the stable version. Bug 1295914 - webkitdirectory could be used to trick users into...

Radio Hack Box - Tool to Demonstrate Vulnerabilities in Wireless Input Devices

The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons nRF24LU1+ USB radio dongle...

[ASA-201703-3] firefox: multiple issues

Arch Linux Security Advisory ASA-201703-3 ========================================= Severity: Critical Date : 2017-03-10 CVE-ID : CVE-2017-5398 CVE-2017-5399 CVE-2017-5400 CVE-2017-5401 CVE-2017-5402 CVE-2017-5403 CVE-2017-5404 CVE-2017-5405 CVE-2017-5406 CVE-2017-5407 CVE-2017-5408 CVE-2017-5410...

CVE-2017-5414

The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox 52 and Thunderbird 52...

UBUNTU-CVE-2017-5414

The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox 52 and Thunderbird 52...

edreams.jp XSS vulnerability

Vulnerable URL: http://www.edreams.jp/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:05 GMT Vulnerability type:| XSS Vulnerability...

Bluetooth Device Picker - Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Bluetooth Device Picker published at the 'play' market has multiple vulnerabilities...

edreams.com XSS vulnerability

Vulnerable URL: http://www.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 08:38 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.br XSS vulnerability

Vulnerable URL: http://www.edreams.com.br/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.ve XSS vulnerability

Vulnerable URL: http://www.edreams.com.ve/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.tr XSS vulnerability

Vulnerable URL: http://www.edreams.com.tr/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.mx XSS vulnerability

Vulnerable URL: http://www.edreams.com.mx/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.ar XSS vulnerability

Vulnerable URL: http://www.edreams.com.ar/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

User Picker Custom field HTML tags showing when creating new issues

h3. Summary Customer reported that when creating custom field User Picker and added html tags in description field, text link shows correctly in Custom Field screen under Administration Setting. However when creating new issues, the create issue form for User Picker field shows the HTML code not...

User Picker Custom field HTML tags showing when creating new issues

h3. Summary Customer reported that when creating custom field User Picker and added html tags in description field, text link shows correctly in Custom Field screen under Administration Setting. However when creating new issues, the create issue form for User Picker field shows the HTML code not...

Moderate: Red Hat Bug Fix Advisory: libreoffice bug fix and enhancement update

Updated libreoffice packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a...

Two New Strains of POS Malware, Cherry Picker, Abaddon, Surface

Point of sale malware has gotten more sophisticated as we inch closer to the two-year anniversary of the Target data breach. Now, two weeks from the biggest shopping day of the year, two new and different strains of point of sale malware have come to light, including one that’s gone largely...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Oxide file picker memory misreference vulnerability

Oxide is a library that supports embedding Chromium the engine used by Google Chrome based WebView in applications. A memory misreference vulnerability exists in the file picker implementation of Oxide prior to version 1.6.5. A remote attacker could exploit this vulnerability via a specially...