858 matches found
The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Creepy - A Geolocation OSINT Tool. Offers Geolocation Information Gathering Through Social Networking Platforms
This project is currently not maintained. I haven't put any work on it since 2016 and with the current state of the API access to instagram and twitter, and the default settings for their geolocation features cree.py wouldn't be of much use. I will live the repository and site up for the time but...
Command Execution Vulnerability in Yitoa's Office Drawing Software
Yitoa Graph is a simple and easy-to-use graphical expression workbench that enables the drawing of hundreds of graphical charts in professional fields such as flowcharts, architecture diagrams, engineering diagrams, mind maps, etc., and also provides a whiteboard for brainstorming and arbitrary...
The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application of the Aurora operating system allows a perpetrator to trigger a service failure.
The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
January 12, 2021-KB4597249 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803
None None...
January 12, 2021-KB4586876 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2
None None...
Use After Free
Use after free in presentation API in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Cross site scripting
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...
PYSEC-2020-72
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...
The vulnerability of the Microsoft Office software package, related to errors in information presentation at the user interface level, allows attackers to carry out spoofing attacks.
The vulnerability of the Microsoft Office suite is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
Exploit Title: BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery Date: 2020-09-11 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://bigbluebutton.org/ Version: BigBlueButton 2.2.25 RedTeam Pentesting discovered a vulnerability in the BigBlueButton web...
Command Execution Vulnerability in Extreme Demo 2019 (Windows Client)
Extreme Presentation 2019 is the PPT office software in the Extreme Office office suite A command execution vulnerability exists in Extreme Presentation 2019 Windows client. An attacker can exploit the vulnerability to execute arbitrary code...
CVE-2020-27608
In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...
Design/Logic Flaw
In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...
CVE-2020-27608
BigBlueButton vulnerability CVE-2020-27608 affects versions prior to 2.2.28. The issue stems from uploaded presentations being sent to clients without a Content-Type header, enabling cross-site scripting (XSS) evidenced by a .png file extension used for an HTML document. Impact is limited to XSS ...
CVE-2020-6559
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2020-6559
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2020-6559
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
