The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or trigger a service failure.

The Mozilla Firefox ESR browser contains numerous vulnerabilities related to memory-related errors. Exploiting these vulnerabilities allows malicious individuals to execute arbitrary code through a specially created website, cause service failures, or trigger an emergency shutdown of the...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

The vulnerability in the implementation of the IPv6 TCP/IP protocol in Windows allows a malicious actor to trigger a failure of the vulnerable system using an ICMPv6 packet...

The vulnerability of the Thunderbird email client, which allows a malicious actor to execute arbitrary code

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, using a fragment of IDL to trigger a...

ImageMagick vulnerability in Wordpress4. 5. 1 The above use-vulnerability warning-the black bar safety net

0x00 ImageMagick vulnerability analysis About ImageMagick vulnerability detailed analysis, phith0n has been in tick aboveImageNagick vulnerability Points allowedhas been for this vulnerability were described in detail. I this article is primarily directed to the ImageMagick vulnerability in...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...

CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)

An Stored Cross Site Scripting was reported by the author to CM Ad Plugins under which an unprivileged user can trigger a Stored XSS to perform malicious actions or any attacker could send a crafted link CSRF which can trigger the Stored XSS. 1 Go to CM Ad changers - Campaigns 2 Create a Campaign...

PHP Double Release Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Stored Cross-Site Scripting Vulnerability in 78OA Office System

78OA office system is a full-featured OA office system launched by Shenzhen Xinxingkong Software for large and medium-sized enterprises and group enterprises. 78OA office system has a stored cross-site script vulnerability, an attacker can directly insert the cross-site script, and triggered by a...

CVE-2016-3725

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service service disruption...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Server device is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures such as memory consumption or device restarting through a specially crafted HTTP...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system’s Smart Install client implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through the list of image parameters created by the Smart Install...

Zombie Call: Trigger Shooter - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Call: Trigger Shooter published at the 'play' market has multiple vulnerabilities...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot by sending an IPv4 ICMP packet with the IP Record Route option...

krb5 security update

1.13.2-12 - Fix CVE-2015-8631, CVE-2015-8630, and CVE-2015-8629 - Remove obsolete trigger to enable building of package - Resolves: 1306969...

krb5 security update

1.10.3-42z1 - Fix CVE-2015-8629 and CVE-2015-8631 - Also fix a spec trigger issue that prevents building - Resolves: 1306973...

Stored XSS in ViewWorkflowTransition.jsp

Step to reproduce: 1 Go to workflow edit page as an administrator 2 Add validator "User Permission Validator" to transition with user name parameter "alert2" 3 It will trigger xss on ViewWorkflowTransition page...

Veris: Stored XSS in Access Rules

XSS trigger issue...

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050) Exploit

Exploit for windows platform in category remote exploits EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find one, you...

kernel: x86-64: IRET faults during NMIs processing

A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs. An unprivileged, local user could use this flaw to crash the system or, potentially although highly unlikely, escalate their privileges on the system...

openstack-swift: Proxy to server DoS through Large Objects

A memory-leak issue was found in OpenStack Object Storage swift, in the proxy-to-server connection. An OpenStack-authenticated attacker could remotely trigger this flaw to cause denial of service through excess memory consumption...