11866 matches found
Type confusion
runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service segmentation violation and application crash via crafted JavaScript code that triggers a "type confusion" in the JSON.stringify function...
CVE-2017-5949
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service heap-based out-of-bounds write and application crash or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...
UBUNTU-CVE-2017-5949
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service heap-based out-of-bounds write and application crash or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...
Out-of-bounds
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service bitfield out-of-bounds read and application crash via crafted JavaScript code that is mishandled in the operatorString function, related to...
CVE-2017-5949
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service heap-based out-of-bounds write and application crash or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...
UBUNTU-CVE-2016-10222
runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service segmentation violation and application crash via crafted JavaScript code that triggers a "type confusion" in the JSON.stringify function...
CVE-2016-10226
Removed by vendor...
CVE-2017-5949
Removed by vendor...
CVE-2016-10226
JavaScriptCore in WebKit (Safari Technology Preview Release 18) is affected by CVE-2016-10226. The vulnerability arises from mishandling in operatorString, leading to a bitfield out-of-bounds read and an application crash, exposed via WebKit files: assembler/MacroAssemblerARM64.h, assembler/Macro...
Samsung Galaxy S8's Facial Unlocking Feature Can Be Fooled With A Photo
Samsung launched its new flagship smartphones, the Galaxy S8 and Galaxy S8 Plus, at its Unpacked 2017 event on Wednesday in New York, with both IRIS and Facial Recognition features, making it easier for users to unlock their smartphone and signing into websites. All users need to do is simply hol...
Harley Geiger on Cybersecurity Policy
Harley Geiger, director of public policy at Rapid7, talks to Threatpost editor Mike Mimoso at RSA Conference 2017 about how policy goes hand in hand with technology when it comes to cybersecurity, the government’s focus on IoT and critical infrastructure, and the role independent security researc...
Remote Access no longer needs to be Complex and Cumbersome
From an IT management perspective, remote access management can be complex. Deployment, administration, testing and compliance is often multifaceted and time consuming, and security is an on-going concern. Granted, I have talked with IT professionals who tell me VPNs - being the primary remote...
UK Demands Encryption Backdoor As London Terrorist Used WhatsApp Before the Attack
The government has once again started asking for backdoor in encrypted services, arguing that it can not give enough security to its citizens because the terrorists are using encrypted apps to communicate and plot an attack. Following last week's terrorist attack in London, the UK government is...
Internet Information Services (IIS) 6.0 WebDAV - ScStoragePathFromUrl Buffer Overflow Exploit
Exploit for windows platform in category remote exploits ''' Description:Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header...
WikiLeaks Dark Matter Release Shows CIA Interdiction of iPhone Supply Chain
From the early days of the iPhone, the CIA has had an interest in compromising the flagship Apple mobile device, according to the latest WikiLeaks release of CIA documents. Today’s Vault 7 Dark Matter release shows an unsurprising interest from the intelligence agency in tracking iPhone users, as...
S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.
Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...
CVE-2017-1134
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference : 1998459...
Code injection
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference : 1998459...
CVE-2017-1134
CVE-2017-1134 describes a local privilege-escalation vulnerability in IBM Reliable Scalable Cluster Technology (RSC) shipped with IBM Tivoli System Automation for Multiplatforms (TSAMP). The issue allows a local attacker to gain root privileges. IBM references indicate affected TSAMP versions 4.1...
