Lucene search
+L

1729 matches found

The Hacker News
The Hacker News
added 2016/02/16 12:59 a.m.13 views

Facebook Offering You $1000 to Run Advertisement Against Terrorism

Over a past few times, we have seen a steady growth in the online recruitment of Jihadis from social networking sites by many radical groups. ISIS has topped the online recruitment, and it is the only terror group that leverages the enormous power of Twitter and Facebook to radicalize young minds...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/12/03 11:30 p.m.21 views

Kazakhstan makes it Mandatory for its Citizens to Install Internet Backdoor

Next in the queue, Kazakhstan is also planning to Spy on encrypted Internet Traffic of its citizens, but in the most shameless way. Unlike other spying nations that are themselves capable of spying on their citizens, Kazakhstan will force every internet user in the country to install bogus securi...

6.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2015/09/08 12:00 a.m.24 views

The vulnerability of the Mac OS X operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Speech UI component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted Unicode string...

6.8CVSS8.1AI score0.02866EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/08/19 12:00 a.m.21 views

Apple OS X Speech UI Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in the Apple OS X Speech UI, which allows remote attackers to exploit the vulnerability by submitting a special Unicode string and tricking an application into parsing it, which can execute...

6.8CVSS7.4AI score0.02866EPSS
SaveExploits0References1
NVD
NVD
added 2015/08/17 12:00 a.m.22 views

CVE-2015-3794

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...

6.8CVSS7.7AI score0.02866EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2015/08/16 11:00 p.m.39 views

CVE-2015-3794

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...

9.4AI score0.02866EPSS
SaveExploits0References4
CVE
CVE
added 2015/08/16 11:00 p.m.79 views

CVE-2015-3794

CVE-2015-3794 affects Apple OS X Speech UI prior to 10.10.5 when speech alerts are enabled. A crafted Unicode string can cause memory corruption, leading to remote code execution or a denial of service. Root cause: improper handling of Unicode in Speech UI. Affected: OS X Yosemite before 10.10.5....

6.8CVSS9.3AI score0.02866EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2015/07/23 1:05 p.m.11 views

speech-language-therapy-jobs.org XSS vulnerability

Vulnerable URL: http://www.speech-language-therapy-jobs.org/jobboard/cands/jobresults.asp?c=1=1=Community=North"+East+England=Permanent=Band+7= Details: Description| Value ---|--- Patched:| Yes, at 01.09.2015 Latest check for patch:| 01.09.2015 01:26 GMT Vulnerability type:| XSS Vulnerability...

6.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2015/07/14 12:00 a.m.49 views

Impero Education Pro - System Remote Command Execution

/ If you're unsure what Impero is, it's essentially a corporate/educational RAT. Vendor site: https://www.imperosoftware.co.uk/ They recently were in the news about how they implemented "anti-radicalisation" shit or something. They had a booth at BETT back in January. They gave out donuts. Those...

5.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2015/05/25 3:25 a.m.6 views

chromium-browser: Use-after-free in Speech.

Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document...

6.8CVSS7.8AI score0.02422EPSS
SaveExploits3References5
OSV
OSV
added 2015/05/20 10:59 a.m.7 views

UBUNTU-CVE-2015-1251

Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document...

6.8CVSS7.7AI score0.02422EPSS
SaveExploits3References5
Tenable Nessus
Tenable Nessus
added 2015/05/20 12:00 a.m.36 views

FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)

Google Chrome Releases reports : 37 security fixes in this release, including : - 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. - 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. - 444927 High CVE-2015-1254: Cross-origin bypass in Editing...

7.5CVSS7.9AI score0.07855EPSS
SaveExploits5References17
FreeBSD
FreeBSD
added 2015/05/19 12:00 a.m.42 views

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 37 security fixes in this release, including: 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. 444927 High CVE-2015-1254: Cross-origin bypass in Editing. Credit to...

7.5CVSS9.5AI score0.07855EPSS
SaveExploits5References1
NVD
NVD
added 2015/03/09 12:59 a.m.33 views

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

5CVSS5.4AI score0.01205EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2015/03/09 12:59 a.m.35 views

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

5CVSS5.8AI score0.01205EPSS
SaveExploits0References6
Prion
Prion
added 2015/03/09 12:59 a.m.33 views

Design/Logic Flaw

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

5CVSS5.7AI score0.01295EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2015/03/09 12:00 a.m.42 views

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

5.7AI score0.01205EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/03/09 12:00 a.m.41 views

openSUSE Security Update : chromium (openSUSE-2015-204)

chromium was updated to version 40.0.2214.111 to fix 31 vulnerabilities. These security issues were fixed : - CVE-2015-1209: Use-after-free in DOM bnc916841. - CVE-2015-1210: Cross-origin-bypass in V8 bindings bnc916843. - CVE-2015-1211: Privilege escalation using service workers bnc916838. -...

7.5CVSS7.3AI score0.04199EPSS
SaveExploits0References36
RedHat Linux
RedHat Linux
added 2015/01/27 6:46 p.m.9 views

chromium-browser: use-after-free in Speech

Use-after-free vulnerability in browser/speech/ttsmessagefilter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab...

7.5CVSS7.5AI score0.01605EPSS
SaveExploits0References5
CNVD
CNVD
added 2015/01/26 12:00 a.m.15 views

Google Chrome Speech Memory Misreference Vulnerability

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A memory misreference vulnerability in the Google Chrome Speech implementation browser/speech/ttsmessagefilter.cc allows attackers to exploit the vulnerability to construct a malicious WEB page that can be...

7.5CVSS7.3AI score0.01605EPSS
SaveExploits0References1
Rows per page
Query Builder