7 matches found
Mozilla Thunderbird < 134.0
The version of Thunderbird installed on the remote Windows host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-04 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory...
Mozilla Firefox < 134.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-01 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory...
Apple iOS Patch Blunder Opens Updated iPhones to Jailbreaks
Apple’s most recent operating system update, iOS 12.4, accidentally unpatched a fix that had been issued in a previous update — leaving devices vulnerable to code execution and privilege-escalation attacks. The flaw also allows phones to be jailbroken — and a public jailbreak has just been releas...
TeamCity 2017.1.5 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits TeamCity 2017.1.5 - Weak file permissions - Privilege Escalation ===================================================== Vendor Homepage: http://www.jetbrains.com Date: 17 Oct 2017 Version : TeamCity Version: 2017.1.5 Build: 47175 Tested on:...
Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation Exploit
Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...
IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities
According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...
Chrome privilege escalation with window.open and <isindex> element — Mozilla
Security researcher echo reported that a web page could open a window with an about:blank location and then inject an element into that page which upon submission would redirect to a chrome: document. The effect of this defect was that the original page would wind up with a reference to a...