CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

LibreOffice < 5.1.4 RTF Character Style Index RCE (macOS)

The version of LibreOffice installed on the remote macOS or Mac OS X host is prior to 5.1.4. It is, therefore, affected by a use-after-free error due to improper handling of the character style index when parsing RTF files. An unauthenticated, remote attacker can exploit this, by convincing a use...

A vulnerability in the Mozilla SeaMonkey software product, which allows a malicious individual to execute arbitrary code.

Mozilla SeaMonkey’s software product contains a vulnerability related to an implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, despite the insufficient restrictions impose...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute arbitrary code

Internet Explorer browser contains a vulnerability related to array indexing, which arises due to insufficient validation of data entered by users when working with CSS objects. Exploiting this vulnerability allows malicious actors to execute arbitrary code through a specially created website...

The vulnerability of the Firefox browser, which allows a malicious actor to execute arbitrary code

The Mozilla Firefox browser contains a vulnerability related to a implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, using insufficient restrictions imposed by the style-s...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

Internet Explorer browser contains a vulnerability related to buffer overflows, caused by insufficient validation of user-input data when processing combinations of CSS properties and Unicode characters. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitra...

The vulnerability of the Firefox browser allows a hacker to gain access to a full list of disabled plugins.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to a complete list of disabled plugins, by using cascading style sheets and pseudo-classes...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability in the WebKit/Source/core/css/StyleSheetContents.cpp file of the Google Chrome browser’s Blink component is related to errors in CSS style sheet access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by using a...

Code injection

Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets CSS pseudo-classes...

CVE-2016-2832

Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets CSS pseudo-classes...

Advanced Forensics File Format: AFF4

The Advanced Forensics File format 4 was originally designed and published in “Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow” M.I. Cohen, Simson Garfinkel and Bradley Schatz, digital investigation 6 2009...

Access Point Impersonation Attacks: hostapd-wpe

hostapd-wpe – Wireless Pwnage Edition – hostapd-wpe is the replacement for FreeRADIUS-WPE . It implements IEEE 802.1x Authenticator and Authentication Server impersonation attacks to obtain client credentials, establish connectivity to the client, and launch other attacks where applicable...

Fashion Style - Certificates or keys found, Dynamic Code Loading, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Style published at the 'play' market has multiple vulnerabilities...

Dessert Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Dessert Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Iconset of Flat Card Style - Dangerous filesystem permissions, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Iconset of Flat Card Style published at the 'play' market has multiple vulnerabilities...

Notification Weather style - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Notification Weather style published at the 'play' market has multiple vulnerabilities...

Space Style Cool widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Space Style Cool widget published at the 'play' market has multiple vulnerabilities...

Japanese style weather today - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Japanese style weather today published at the 'play' market has multiple vulnerabilities...

Z Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Z Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Clear Glass Transparent Style - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Clear Glass Transparent Style published at the 'play' market has multiple vulnerabilities...