3293 matches found
The vulnerability of the Serv-U File Server allows a malicious attacker to execute arbitrary JavaScript code in the user’s browser, to replace the default content, or to redirect traffic to a specified resource.
The vulnerability of the Serv-U File Server software lies in insufficient checks on the parameters transmitted by clients and the scripts used in HTM scenarios. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser, replace the displayed...
The vulnerability of Google Chrome’s browser allows a malicious actor to replace URLs.
Google Chrome browser contains a vulnerability related to the incorrect processing of bidirectional IRI identifiers in the UnescapeURLWithOffsetsImpl function in net/base/escape.cc. Exploiting this vulnerability allows malicious actors to replace URLs with specially crafted Unicode text that is...
AIX 7.1 TL 4 : bind (IV84458) (deprecated)
https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...
AIX 6.1 TL 9 : bind (IV84456) (deprecated)
https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...
AIX 5.3 TL 12 : bind (IV85298) (deprecated)
https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...
The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net
Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...
Riot Games League of Legends - Insecure File Permissions Privilege Escalation
Exploit for windows platform in category local exploits ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
Apache ActiveMQ Fileserver Remote Code Execution Vulnerability
Apache ActiveMQ is the messaging and integration model provider . A remote code execution vulnerability exists in the Apache ActiveMQ Fileserver web program, which could allow a remote attacker to replace the web application with malicious code to execute remote code on an affected system...
The vulnerability of the ColdFusion interpreter allows attackers to replace the server.
The vulnerability of the ColdFusion interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the server using a specially crafted certificate...
[SECURITY] Fedora 24 Update: subversion-1.9.4-1.fc24
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...
MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016
MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft SharePoint that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...
MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016
None None...
MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016
MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework. The vulnerability could cause information...
The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.
The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...
The vulnerability of the microprogramming software of the Storeonce Backup system allows a intruder to replace the user during the session.
The vulnerability of Storeonce Backup’s microprogramming software relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during the session...
The vulnerability of the Android operating system allows a hacker to replace the server
The vulnerability of the caching function in the TrustManagerImpl class TrustManagerImpl.java of the Conscrypt component in the Android operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace servers by accessing...
The vulnerability of the Safari browser, which allows a hacker to replace the user interface
The vulnerability of Safari browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the user interface through a web page that replaces the actual text...
Microsoft Support
None None...
MS16-042: Description of the security update for SharePoint Server 2010 Office Web Apps: April 12, 2016
MS16-042: Description of the security update for SharePoint Server 2010 Office Web Apps: April 12, 2016 Summary This security update resolves vulnerabilities in SharePoint that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...