The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the content/browser/webui/contentwebuicontrollerfactory.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent access restrictions due to errors in processing requests to the...

Microsoft Edge browser’s vulnerability, which allows a hacker to bypass content protection policies

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...

Domain penetration--Dump Clear-Text Password after KB2871997 installed-vulnerability warning-the black bar safety net

In penetration testing, the penetration tester will typically use mimikatz from the LSA of the memory to export system's plaintext password, while experienced administrators will often choose to install the patch kb2871997 to limit this behavior. This one relates to what are the interesting...

KLA10896 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10830. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...

The vulnerability of Microsoft Edge browser allows a hacker to bypass existing access restrictions policies.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...

The vulnerability of Microsoft Edge browser allows a hacker to bypass existing access restrictions policies.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...

The vulnerability of the Android operating system allows a hacker to replace the server

The vulnerability of the caching function in the TrustManagerImpl class TrustManagerImpl.java of the Conscrypt component in the Android operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace servers by accessing...

KLA10890 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass security measures and delete data...

Vulnerability of Firefox and Firefox ESR browsers, which allows a hacker to forge the address bar

The vulnerability in the browser/base/content/browser.js function of Firefox and Firefox ESR is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to forge the URL address line remotely...

The vulnerability of the Ruby on Rails software platform, which allows attackers to bypass the authentication process

The vulnerability of the httpbasicauthenticatewith method in the ActionController/lib/actioncontroller/metal/httpauthentication.rb implementation of Basic Authentication in the Ruby on Rails software framework is related to security configuration errors. Exploiting this vulnerability allows a...

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.

The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...

The vulnerability of the web server for visualizing BACnet/IP network controllers, SAUTER moduWeb Vision, allows a intruder to bypass the authentication process.

The vulnerability of the BACnet/IP network controller visualization web server from SAUTER moduWeb Vision is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by utilizing knowledge of password hashes without knowi...

The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.

The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...

The vulnerability of Google Chrome allows a perpetrator to replace the source of a document.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the source of the document...

Symfony PHP Framework Session Fixation

Advisory: Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality A session fixation vulnerability within the Symfony web application framework's "Remember Me" login functionality allows an attacker to impersonate the victim towards the web application if the session ID value...

The vulnerability of the WildFly application server and the JBoss Enterprise Application Platform, which allows attackers to carry out clickjacking attacks

The vulnerability of the Management Console Java-server component of the WildFly application server and the JBoss Enterprise Application Platform-related platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out...

The vulnerability of the Firefox browser, which allows a hacker to execute scripts across different websites

The vulnerability of the Firefox browser’s SDK extension is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks using specially crafted JavaScript code...

The vulnerability of the iOS operating system, which allows attackers to carry out “man-in-the-middle” attacks

The vulnerability of the X.509 certificate verification component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...