25 matches found
notes
notes An archive of my vulnerability research notes. Mostly, expanded takes from Twitter...
Apache Calcite security vulnerabilities
Apache Calcite is an open-source framework developed by the Apache Foundation in the United States, used for building database and data management systems. Versions of Apache Calcite from 1.5.0 to 1.42 contained security vulnerabilities. These vulnerabilities stemmed from the use of external...
xss_hunter.py
EnterXSS Fuzzer – Automated Cross-Site Scripting Detection...
reflections:ConfigurationBuilderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
Detailed Report: https://oss-fuzz.com/testcase?key=4534735016886272 Project: reflections Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationBuilderFuzzer Job Type: libfuzzerasanreflections Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
Fedora: Security Advisory for reflections (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: reflections-0.9.12-17.fc40
A Java run-time meta-data analysis, in the spirit of Scannotations Reflections scans your class-path, indexes the meta-data, allows you to query it on run-time and may save and collect that information for many modules within your project. Using Reflections you can query your meta-data such as: g...
Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
Description The plugin does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users. PoC await fetch"http://vulnerable-site.tld/wp-content/plugins/simple-ajax-chat/simple-ajax-chat-core.php?sacSendChat=yes", "credentials": "include",...
This Week in Spring - Happy New Year 2023 edition - December 27th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Its 27 December as I write this and - being honest - I couldnt be happier. Its raining outside. Im in a warm cozy office. Good music is playing. People are asleep in my home. I can hear the raindrops and wind outside the...
Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses
Okay, its an obscure threat. But people are researching it: Our models and experimental results in a controlled lab setting show it is possible to reconstruct and recognize with over 75 percent accuracy on-screen texts that have heights as small as 10 mm with a 720p webcam." That corresponds to 2...
MGASA-2022-0300 Updated thunderbird packages fix security vulnerability
Mouse Position spoofing with CSS transforms. CVE-2022-36319 Directory indexes for bundled resources reflected URL parameters. CVE-2022-36318...
sunsetreflections.com Cross Site Scripting vulnerability OBB-2692678
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Injecting a Backdoor into SolarWinds Orion
Crowdstrike is reporting on a sophisticated piece of malware that was able to inject malware into the SolarWinds build process: Key Points SUNSPOT is StellarParticles malware used to insert the SUNBURST backdoor into software builds of the SolarWinds Orion IT management product. SUNSPOT monitors...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 CVE-2020-13942 POC by Eugene Rojavski Origi...
reflectionsholidayparks.com.au Improper Access Control vulnerability OBB-1345735
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Images in Eye Reflections
In Japan, a cyberstalker located his victim by enhancing the reflections in her eye, and using that information to establish a location. Reminds me of the image enhancement scene in Blade Runner. That was science fiction, but now image resolution is so good that we have to worry about it...
CVE-2011-2334
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections...
Design/Logic Flaw
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections...
CVE-2011-2334
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections...
CVE-2011-2334
A use-after-free vulnerability exists in WebKit within Google Chrome before Blink M12, triggered in RenderLayer when removing elements with reflections. Affected component is Chrome/WebKit/Blink RenderLayer; root cause is use-after-free. Public exploitation status and concrete remediation details...
