4144 matches found
chromium-browser: Insufficient policy enforcement in Extensions
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension...
Weak Password Vulnerability in Enphase Envoy
The Enphase Envoy is the home energy control gateway at the heart of the Enphase Energy home energy solution. A weak password vulnerability exists in Enphase Envoy. A remote attacker is allowed to exploit the vulnerability to submit a special request for unauthorized access to the application...
Apple iOS Foundation Memory Corruption Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices. A memory corruption vulnerability exists in Apple iOS Foundation, which allows local attackers to exploit the vulnerability to submit a special request for elevated privileges...
IP-Tools 2.5 - Local Buffer Overflow (SEH) (Egghunter) Exploit
Exploit for windows platform in category local exploits !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author: Juan...
IP-Tools 2.5 Local Buffer Overflow
!/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author: Juan Prescotto Tested Against: Win7 Pro SP1 64 bit Software...
IP-Tools 2.5 - 'Log to file' Local Buffer Overflow (SEH) (Egghunter)
!/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author: Juan Prescotto Tested Against: Win7 Pro SP1 64 bit Software...
What Robert Mueller Knows—and Isn't Telling Us
The special counsel's indictments have so far stopped short of tying Trump and his associates to a broader conspiracy, blanks that will eventually get filled in...
Cross site scripting
A XSS vulnerability was found in module m-server 1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names...
CVE-2018-16484
A XSS vulnerability was found in module m-server 1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names...
FBI Mapping 'Joanap Malware' Victims to Disrupt the North Korean Botnet
The United States Department of Justice DoJ announced Wednesday its effort to "map and further disrupt" a botnet tied to North Korea that has infected numerous Microsoft Windows computers across the globe over the last decade. Dubbed Joanap, the botnet is believed to be part of "Hidden Cobra"—an...
CVE-2019-5778
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension...
The vulnerability of microprogrammed software in Schneider Electric Modicon programmable logic controllers, related to deficiencies in character elimination, allows a intruder to initiate the password change procedure for the authenticated user.
The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon relates to deficiencies in the elimination of special symbols. Exploiting this vulnerability can allow an intruder to initiate the password change process for the authenticated user...
[SECURITY] Fedora 28 Update: unrtf-0.21.9-8.fc28
UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...
xterm vulnerable to remote code execution
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters...
GHSA-MC23-976P-J42X xterm vulnerable to remote code execution
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters...
Remote Code Execution (RCE)
xterm is vulnerable to remote code execution attacks. The vulnerability exists when xterm mishandles special characters, allowing RCE attacks...
CVE-2019-0542
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js...
Remote code execution
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js...