Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

Google Chrome 访问控制错误漏洞

Google Chrome is a Web browser from Google, Inc. An access control error vulnerability exists in Google Chrome, which stems from a faulty implementation of Google Chrome's password and could be exploited to create a specially designed Web page that could trick victims into accessing it and...

Google Chrome 安全特征问题漏洞

Google Chrome is a Web browser from Google, Inc. A security feature vulnerability exists in Google Chrome, which stems from a faulty implementation of the product DevTools. A remote attacker could exploit the vulnerability to create a specially crafted web page, trick victims into accessing it, a...

Microsoft Visual Studio Spoofing Vulnerability (CNVD-2021-54406)

Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...

Microsoft Visual Studio Code Code Execution Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability by tricking a user into copying a repository and opening it in Visual Studio Code to run arbitrar...

Hackers are using Word documents to drop NetSupport Manager RAT

By Sudais Asif Before dropping NetSupport Manager RAT, attackers trick users into opening a malicious MS Word document by entering a password. This is a post from HackRead.com Read the original post: Hackers are using Word documents to drop NetSupport Manager RAT...

Huawei Emily-L29C Information Disclosure Vulnerability

The Huawei Emily-L29C is a smartphone from the Chinese company Huawei. An information disclosure vulnerability exists in the Huawei Emily-L29C. The vulnerability arises from a configuration or other error in the operation of a network system or product. An attacker can exploit this vulnerability ...

Memory Corruption Vulnerability in Delta TPEditor tpe Project File

Delta TPEditor is a HMI programming software. A memory corruption vulnerability exists in the Delta TPEditor tpe project file. An attacker can trick a user who installs TPEditor into opening a malicious tpe file, which in turn triggers the execution of malicious code on the user's system or cause...

Huawei VMall Override Vulnerability

Huawei VMall is Huawei's e-commerce platform for nationwide services. Huawei VMall suffers from an overstepping vulnerability, which can be exploited by local attackers who do not have access privileges to trick users into installing malicious mobile applications, sending outbound HTTP requests a...

Resource consumption vulnerability in multiple Huawei phones

Huawei P9 and others are smartphones from the Chinese company Huawei Huawei. A resource consumption vulnerability exists in several Huawei phones. An attacker can exploit the vulnerability by tricking users into installing a malicious application that may turn on the phone's flash and quickly dra...

Google Android Qualcomm Secure Channel Manager Driver Elevation of Privilege Vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android Qualcomm Secure Channel Manager Driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by trickin...

Google Chrome Blink Type Obfuscation Vulnerability

Google Chrome is a web browser developed by Google Inc. in the United States. A type obfuscation vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the...

IBM Security Access Manager Security Bypass Vulnerability (CNVD-2017-01409)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager that stems from the program failing to properly validate content. An attacker could exploit the vulnerability by tricking a user into opening specially crafted...

Wordpress plugin trail-passion has xss vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin trail-passion suffers from an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages, trick...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment is a suite of software for centralized management of Cisco HCS solutions. A cross-site request forgery vulnerability exists in Cisco Hosted Collaboration Mediation Fulfillment that could allow a remote attacker to construct a malicious URI, trick a...

Android LibUtils Arbitrary Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in Android LibUtils allows remote attackers to exploit the vulnerability to build malicious applications that can be elevated in privilege by tricking users in...

The vulnerability of the Internet Explorer browser allows a perpetrator to trick users into creating a TCP connection with a limited port.

The vulnerability of Internet Explorer is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to remotely trick users into establishing a TCP connection with a limited port, through a specially crafted web page...

Google Chrome suffers from an unspecified vulnerability (CNVD-2016-03796)

Google Chrome is a popular web browser. Google Chrome has an unspecified security vulnerability that allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them for attack...

Cybozu Garoon Email Read Vulnerability (CNVD-2016-03720)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...