Hancom Hangul HCell Workbook Table and Pivot Style Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0148 Hancom Hangul HCell Workbook Table and Pivot Style Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4293 Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul...

[SECURITY] Fedora 23 Update: kf5-kdesignerplugin-5.24.0-1.fc23

This framework provides plugins for Qt Designer that allow it to display the widgets provided by various KDE frameworks, as well as a utility kgendesignerplugin that can be used to generate other such plugins from ini-style description files...

[SECURITY] Fedora 24 Update: kf5-kdesignerplugin-5.24.0-1.fc24

This framework provides plugins for Qt Designer that allow it to display the widgets provided by various KDE frameworks, as well as a utility kgendesignerplugin that can be used to generate other such plugins from ini-style description files...

CVE-2016-5127

CVE-2016-5127 is a use-after-free vulnerability in Blink’s editing path (WebKit/Blink) affecting Google Chrome prior to 52.0.2743.82. The issue arises in WebKit/Source/core/editing/VisibleUnits.cpp and can be triggered by crafted JavaScript using an @import at-rule in a CSS token sequence with re...

CVE-2016-5127

Removed by vendor...

CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

UBUNTU-CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

LibreOffice < 5.1.4 RTF Character Style Index RCE (macOS)

The version of LibreOffice installed on the remote macOS or Mac OS X host is prior to 5.1.4. It is, therefore, affected by a use-after-free error due to improper handling of the character style index when parsing RTF files. An unauthenticated, remote attacker can exploit this, by convincing a use...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute arbitrary code

Internet Explorer browser contains a vulnerability related to array indexing, which arises due to insufficient validation of data entered by users when working with CSS objects. Exploiting this vulnerability allows malicious actors to execute arbitrary code through a specially created website...

A vulnerability in the Mozilla SeaMonkey software product, which allows a malicious individual to execute arbitrary code.

Mozilla SeaMonkey’s software product contains a vulnerability related to an implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, despite the insufficient restrictions impose...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

Internet Explorer browser contains a vulnerability related to buffer overflows, caused by insufficient validation of user-input data when processing combinations of CSS properties and Unicode characters. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitra...

The vulnerability of the Firefox browser, which allows a malicious actor to execute arbitrary code

The Mozilla Firefox browser contains a vulnerability related to a implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, using insufficient restrictions imposed by the style-s...

The vulnerability of the Firefox browser allows a hacker to gain access to a full list of disabled plugins.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to a complete list of disabled plugins, by using cascading style sheets and pseudo-classes...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability in the WebKit/Source/core/css/StyleSheetContents.cpp file of the Google Chrome browser’s Blink component is related to errors in CSS style sheet access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by using a...

Code injection

Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets CSS pseudo-classes...

CVE-2016-2832

Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets CSS pseudo-classes...

Advanced Forensics File Format: AFF4

The Advanced Forensics File format 4 was originally designed and published in “Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow” M.I. Cohen, Simson Garfinkel and Bradley Schatz, digital investigation 6 2009...

Access Point Impersonation Attacks: hostapd-wpe

hostapd-wpe – Wireless Pwnage Edition – hostapd-wpe is the replacement for FreeRADIUS-WPE . It implements IEEE 802.1x Authenticator and Authentication Server impersonation attacks to obtain client credentials, establish connectivity to the client, and launch other attacks where applicable...

Fashion Style - Certificates or keys found, Dynamic Code Loading, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Style published at the 'play' market has multiple vulnerabilities...