Linux UDF File System Denial of Service Vulnerability

Linux kernel is an open source operating system. The linux kernel, which supports the UDP filesystem, has a security vulnerability that allows a local user to mount a specially crafted UDF filesystem that triggers an error in udfreadinode and crashes the target system...

Despite Issues, 6 Reasons Why Windows 10 is Best Windows Ever

Windows 10 is built with the power features of Windows 7 and 8.1, which makes it a robust operating system. It gained 65 million users in the first three days after its release. Still counting and making Windows 10 as a universal platform for all the devices running the same operating system. By...

CVE-2015-1275

Cross-site scripting XSS vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alertdocument.cookie;// substring, aka...

Cross site scripting

Cross-site scripting XSS vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alertdocument.cookie;// substring, aka...

CVE-2015-1286

Cross-site scripting XSS vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8contextnativehandler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context...

Cross site scripting

Cross-site scripting XSS vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8contextnativehandler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context...

CVE-2015-1286

Removed by vendor...

CVE-2015-1286

Cross-site scripting XSS vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8contextnativehandler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context...

CVE-2015-1275

Cross-site scripting XSS vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alertdocument.cookie;// substring, aka...

CVE-2015-1275

Google Chrome before 44.0.2403.89 on Android is vulnerable to UXSS via a crafted intent: URL, enabling remote attackers to inject arbitrary script or HTML (trailing alert(document.cookie);// substring) through UrlUtilities.java. This is CVE-2015-1275. OpenSUSE/GLSA and related advisories show the...

Google Patches 43 Bugs in Chrome

A new version of Google Chrome is available, and it contains patches for 43 security vulnerabilities, many of them in the high-risk category. Two of the more serious vulnerabilities fixed in Chrome 44 are a pair of universal cross-site scripting bugs. One of the flaws is in blink, the Web layout...

Google Chrome < 44.0.2403.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 44.0.2403.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 201507stable-channel-update21 advisory. - The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in...

UPNPD M-SEARCH - ssdp:discover Reflection Denial of Service

UPNPD M-SEARCH - ssdp:discover Reflection Denial of Service !/usr/bin/perl upnpd M-SEARCH ssdp:discover reflection Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with...

CVE-2015-3725

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

CVE-2015-3722

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...

Code injection

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

Code injection

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...

CVE-2015-3725

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

CVE-2015-3722

CVE-2015-3722 concerns Apple iOS before 8.4 where the universal provisioning profile install logic did not ensure bundle ID uniqueness, enabling an attacker to trigger a collision that could prevent apps from launching (denial of service). The connected sources note that Apple addressed this in i...

Apple iOS Watch Common Profile App Installation Logic Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. There is an issue with the Apple iOS Watch Universal Profile app installation logic that allows collisions to occur in pre-existing bundle IDs, preventing other apps from being enabled...