HackerOne: IE 11 Self-XSS on Jira Integration Preview Base Link

I wasn't sure if you would accept this report due to it being Self-XSS, but I figured it might be useful information because it breaks one of the flows used to validate URLs. Steps ==================== 1. Launch IE 11 2. Log into a HackerOne account that has admin on a program. 3. Go to the...

Mozilla Firefox Security Advisories (MFSA2017-05, MFSA2017-07) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

PT-2017-16504

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 52 Thunderbird versions prior to 52 Description A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion about the currently loaded site...

CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

UBUNTU-CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

LibreOffice Calc And Writer File Disclosure Vulnerability - Windows

LibreOffice is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Komodo Edit 9.2 / 9.3 Buffer Overflow

ActiveState komodoEdit9.2/9.3 preview browser buffer ''' go to preview browser preview with another file or url -payload- preview using In a komodo tab ''' Author: sultan albalawi video:https://www.facebook.com/pentest3/videos/vb.100012552940568/261386070956489/?type=2&theater Tested on:win7 from...

Mozilla Firefox Security Advisories (MFSA2017-01, MFSA2017-02) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

UBUNTU-CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...

Security vulnerabilities fixed in Firefox 51 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potential...

PT-2017-16469

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 51 Description The feed preview for RSS feeds can be exploited to capture errors and exceptions generated by privileged content. This allows for the exposure of internal information that is not intended to be seen by...

ISC BIND 9 RTYPE ANY Assertion Failure Denial of Service Vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol. ISC BIND 9 Supported Preview Edition is a preview edition. ISC BIND 9 suffers from a RTYPE ANY assertion failure denial of service vulnerability. A remote attacker can exploit the vulnerability to cause a denial of...

Discourse: XSS in topics because of bandcamp preview engine vulnerability

Load http://try.discourse.org 2. Click "New topic" 3. Enter this payload https://89.223.28.48/bandcamp.com/album/index.html?XSSa2 to field with placeholder "Type title or paste a link here" 4. Wait for the preview engine to parse the link 4. XSS will fire F151439 You should sanitize external...

November 2016 Preview of Monthly Quality Rollup for Windows Server 2012

November 2016 Preview of Monthly Quality Rollup for Windows Server 2012 The November 2016 Preview of Monthly Quality Rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this quality rollup as part of your regular maintenance routines...

PT-2022-24411 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam versions prior to 1.5.0 Description: A vulnerability has been found in phpipam, allowing for cross site scripting through the manipulation of an unknown functionality in the file app/admin/import-export/import-load-data.php of the...

Windows Graphics Component Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...

Windows Graphics Component Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...

Views Send - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-061

The Views Send module enables you to send mail to multiple users from a View. The module doesn't sufficiently filter potential user-supplied data when previewing the e-mail which can lead to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker mus...

Command Execution Vulnerability in NetSense Information Security Audit System

NetShen Security Audit System is a hardened computer that can defend against attacks with strong security protection. NetShen Security Audit System is capable of blocking illegal access and malicious attacks, blocking illegal commands, and filtering out all illegal access behaviors to target...

Microsoft Office 365 Word - Code Execution Vulnerability

Document Title: =============== Microsoft Office 365 Word - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1030 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ====================================...