SUSE CVE-2008-1080

Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input...

SUSE CVE-2008-2142

Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code...

SUSE CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

SUSE CVE-2010-1389

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a 1 paste or 2 drag-and-drop operation for a...

SUSE CVE-2010-2769

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in...

SUSE CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

SUSE CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

SUSE CVE-2012-1925

Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows...

SUSE CVE-2012-5837

The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

The Dangers of macOS Ransomware A Closer Look at KeRanger, FileCoder, MacRansom, and EvilQuest

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MacOS ransomware typically spreads through user-assisted methods such as downloading and running fake or trojanized applications. It can also arrive as a second-stage payload dropped or downloaded by oth...

Microsoft Reveals Tactics Used by 4 Ransomware Families Targeting macOS

Microsoft has shed light on four different ransomware families – KeRanger, FileCoder, MacRansom, and EvilQuest – that are known to impact Apple macOS systems. "While these malware families are old, they exemplify the range of capabilities and malicious behavior possible on the platform," the tech...

GHSA-V2GW-X5JF-PGWV Mercurial Directory traversal vulnerability

Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

Mercurial Directory traversal vulnerability

Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

GLSA-202105-17 : rxvt-unicode: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-17 rxvt-unicode: User-assisted execution of arbitrary code It was discovered that rxvt-unicode did not properly handle certain escape sequences. Impact : A remote attacker could entice a user to run a program where attacker...

GLSA-202105-37 : Nextcloud Desktop Client: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-37 Nextcloud Desktop Client: User-assisted execution of arbitrary code It was discovered that Nextcloud Desktop Client did not validate URLs. Impact : A remote attacker could entice a user to connect to a malicious Nextclou...

GLSA-202105-18 : LittleCMS: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-18 LittleCMS: User-assisted execution of arbitrary code It was discovered that LittleCMS aka Little Color Management System had an integer overflow in the AllocateDataSet function in cmscgats.c. Impact : A remote attacker...

GLSA-202105-11 : GNU Screen: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-11 GNU Screen: User-assisted execution of arbitrary code It was discovered that GNU screen did not properly handle certain UTF-8 character sequences. Impact : A remote attacker could entice a user to run a program where...

GLSA-202105-13 : Mumble: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-13 Mumble: User-assisted execution of arbitrary code Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted server list web page using...

GLSA-202105-10 : GNOME Autoar: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-10 GNOME Autoar: User-assisted execution of arbitrary code It was discovered that GNOME Autoar could extract files outside of the intended directory. Impact : A remote attacker could entice a user to open a specially crafte...

GNU Screen: User-assisted execution of arbitrary code

Background GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells. Description It was discovered that GNU screen did not properly handle certain UTF-8 character sequences. Impact A remote attacker could entice a user...