Kaspersky: Certificate warnings and similar UI elements in Web protection of Anti-Virus products family are susceptible to clickjacking

Summary Clickjacking can be used to trick users into overriding certificate warnings, disabling Safe Money functionality or phishing alerts. Description On certificate warning pages, a single click is sufficient to trigger overriding a wrong certificate. While an additional warning is displayed...

'prvCheckOptions' function information disclosure vulnerability in multiple products

AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...

'prvProcessICMPPacket' Function Information Disclosure Vulnerability in Multiple Products

AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...

CVE-2018-18362

Technical details about CVE-2018-18362 are not publicly available in the provided connected documents. The description notes an XSS issue in Norton Password Manager for Android but does not disclose affected versions, exploit details, or remediation. Monitor for updates.

UBUNTU-CVE-2018-6152

The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted...

nifti (>=0.3.1, <=0.6.0), trk-io (>=0.3.0, <=0.11.0) potentially affected by CVE-2018-21000 via safe-transmute (>=0.5.0, <=0.8.0)

safe-transmute CARGO version =0.5.0, =0.3.1, =0.3.0, =0.11.0 Source cves: CVE-2018-21000 Source advisory: OSV:RUSTSEC-2018-0013...

PT-2018-15493

Name of the Vulnerable Software and Affected Versions safe-transmute crate versions prior to 0.10.1 Description An issue was discovered in the safe-transmute crate where a constructor's arguments are in the wrong order, causing heap memory corruption. The affected versions of this crate switched...

PT-2018-14955

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15 Description The issue concerns the upload functionality in GetSimpleCMS, where the admin/upload.php blocks uploads of .html files, but Internet Explorer can still render HTML elements in a .eml file. This is due to...

The Mueller Investigation May Be Safe Despite Matt Whitaker

Robert Mueller's work as special counsel may seem imperiled by the acting attorney general, but there's plenty of reason for optimism...

tomas.by XSS vulnerability

Open Bug Bounty ID: OBB-684185 Description| Value ---|--- Affected Website:| tomas.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

October is National Cybersecurity Awareness Month

October is National Cybersecurity Awareness Month NCSAM. NCSAM is a collaborative effort between DHS and its public and private partners—including the National Cyber Security Alliance NCSA—to raise awareness about the vital role cybersecurity plays in the lives of U.S. citizens. NCCIC will be...

BullGuard Safe Browsing Cross-Site Scripting Vulnerability

BullGuard Safe Browsing is a secure browser from BullGuard UK. A cross-site scripting vulnerability exists in BullGuard Safe Browsing version 18.1.355. The vulnerability can be exploited by a remote attacker to execute JavaScript code from a domain name indexed in search results...

Cross site scripting

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

CVE-2018-17061 affects BullGuard Safe Browsing prior to version 18.1.355.9. The vulnerability is a cross-site scripting (XSS) issue that can be triggered on Google, Bing, and Yahoo! pages through domains indexed in search results. The connected CNVD/NVD entries confirm the vulnerable component an...

PT-2018-13872

Name of the Vulnerable Software and Affected Versions BullGuard Safe Browsing versions prior to 18.1.355.9 Description The issue allows for cross-site scripting XSS attacks on Google, Bing, and Yahoo! pages. This occurs when domains indexed in search results are used to exploit the vulnerability...

CVE-2018-17061: Improper Neutralization of Input During Web Page Generation

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

We know what your kids did this summer

For many kids and teenagers, summer is all about ditching school books in favor of hobbies and fun. Every year we release a report on children's interests, as reflected in their online activity. This summer, we investigated what they prefer in their free time. The Parental Control module in...