Linux kernel 'compat_setsockopt()' function arbitrary code execution vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the IPTSOSETREPLACE parameter in the 'compatsetsockopt' function of the Linux kernel. A local attacker could exploit this vulnerability to...

USN-3020-1 linux-lts-vivid vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

Internet Bug Bounty: _php_mb_regex_ereg_replace_exec - double free

phpmbregexeregreplaceexec is prone to double free that can be turned into a code execution. Details about the bug: https://bugs.php.net/bug.php?id=72402 already fixed...

The vulnerability of Google Chrome browser allows a hacker to replace website URLs.

The vulnerability of the browser/browsingdata/browsingdataremover.cc component in Google Chrome relates to the removal of HPKP elements during cache cleaning. Exploiting this vulnerability could allow a malicious actor to replace websites with valid certificates from any authorized certification...

USN-2936-2: Oxygen-GTK3 update

USN-2936-1 fixed vulnerabilities in Firefox. The update caused Firefox to crash on startup with the Oxygen GTK theme due to a pre-existing bug in the Oxygen-GTK3 theme engine. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Christian Holler, Tyson...

CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

Design/Logic Flaw

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

UBUNTU-CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

CVE-2016-2816

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy CSP protection mechanism via the multipart/x-mixed-replace content type...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2016-39 Miscellaneous memory safety hazards rv:46.0 / rv:45.1 / rv:38.8 MFSA 2016-42 Use-after-free and buffer overflow in Service Workers MFSA 2016-44 Buffer overflow in libstagefright with CENC offsets MFSA 2016-45 CSP not applied to pages sent with...

The vulnerability of the Firefox browser, which allows a hacker to replace web pages

The vulnerability of Firefox browsers is related to errors in processing the "" character in URI data. Exploiting this vulnerability can allow a remote attacker to replace web pages...

McAfee Email Gateway Cross-Site Scripting Vulnerability (CNVD-2016-02066)

McAfee Email Gateway is an enterprise-class email security solution. A cross-site scripting vulnerability exists in McAfee Email Gateway MEG version 7.6.x prior to 7.6.404, where File Filtering is enabled and action is set to ESERVICES:REPLACE, which allows a remote attacker to inject arbitrary w...

CVE-2016-3969

Cross-site scripting XSS vulnerability in McAfee Email Gateway MEG 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email...

Bumble: Account Takeover

Hello this is regarding an account takeover via import image from facebook option, when we import fb photos a link with a token generated which is valid for any user and it can be use to replace user linked fb account to attacker fb account And then login via fb to takeover account Note: I tested...

UBUNTU-CVE-2016-3134

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service heap memory corruption via an IPTSOSETREPLACE setsockopt call...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA FormCalc. The constructed replace call triggers an integer overflow. An attacker can exploit this vulnerability to execute arbitrary code in the current process conte...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the phpstrReplaceInSubject function ext/standard/string.c in the PHP interpreter is related to errors in the code. Exploiting this vulnerability allows an attacker to execute arbitrary code by entering special parameters remotely...