Phabricator: Window.opener protection Bypass

SUMMURY ======== If you create a post/comment with a link like http://x.com in fabricator then server add rel="norefferrer" to anchor tag . So child window dont have access to parent window. But it can be bypassed with url like /\x.com/index.php and child window can change the location property o...

UBUNTU-CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...

Interesting disguise employed by new Mac malware HiddenLotus

On November 30, Apple silently added a signature to the macOS XProtect anti-malware system for something called OSX.HiddenLotus.A. It was a mystery what HiddenLotus was until, later that same day, Arnaud Abbati found the sample and shared it with other security researchers on Twitter. The...

HackerOne: Query parameter reordering causes redirect page to render unsafe URL

Hello hackerone team I want to report I bypass w/c lead to XSS but limited only for IE due to CSP block on chrome Here is the POC ------------------ https://hackerone.com/redirect?signature=c9304cadaeabca0bfb7b92503c0318da5c42a86b&url=http%3A%2F%2Fbuglabs.me&url=JAVASCRIPT:alert%09document.domain...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...

Huawei VMall Override Vulnerability

Huawei VMall is Huawei's e-commerce platform for nationwide services. Huawei VMall suffers from an overstepping vulnerability, which can be exploited by local attackers who do not have access privileges to trick users into installing malicious mobile applications, sending outbound HTTP requests a...

UBUNTU-CVE-2017-12938

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

Resource consumption vulnerability in multiple Huawei phones

Huawei P9 and others are smartphones from the Chinese company Huawei Huawei. A resource consumption vulnerability exists in several Huawei phones. An attacker can exploit the vulnerability by tricking users into installing a malicious application that may turn on the phone's flash and quickly dra...

Google Android Qualcomm Secure Channel Manager Driver Elevation of Privilege Vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android Qualcomm Secure Channel Manager Driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by trickin...

Google Chrome Blink Type Obfuscation Vulnerability

Google Chrome is a web browser developed by Google Inc. in the United States. A type obfuscation vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the...

Netgear DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution

!/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all versions - by manipulating the httpd config files to trick the...

IBM Security Access Manager Security Bypass Vulnerability (CNVD-2017-01409)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager that stems from the program failing to properly validate content. An attacker could exploit the vulnerability by tricking a user into opening specially crafted...

Wordpress Quiz And Survey Master Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in the Wordpress Quiz And Survey Master plugin. Attackers can...

Wordpress plugin trail-passion has xss vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin trail-passion suffers from an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages, trick...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment is a suite of software for centralized management of Cisco HCS solutions. A cross-site request forgery vulnerability exists in Cisco Hosted Collaboration Mediation Fulfillment that could allow a remote attacker to construct a malicious URI, trick a...

Microsoft Internet Explorer CVE-2016-3353 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. This could allow the attacker to bypass certain security restrictions. This may lead to othe...

Android LibUtils Arbitrary Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in Android LibUtils allows remote attackers to exploit the vulnerability to build malicious applications that can be elevated in privilege by tricking users in...

The vulnerability of the Internet Explorer browser allows a perpetrator to trick users into creating a TCP connection with a limited port.

The vulnerability of Internet Explorer is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to remotely trick users into establishing a TCP connection with a limited port, through a specially crafted web page...

Google Chrome suffers from an unspecified vulnerability (CNVD-2016-03796)

Google Chrome is a popular web browser. Google Chrome has an unspecified security vulnerability that allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them for attack...

Cybozu Garoon Email Read Vulnerability (CNVD-2016-03720)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...