Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service

Mozilla Thunderbird is vulnerable to denial of service DoS attack. It is possible because it does not prevent the processing of malformed web content, allowing the application to crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service. The application does not properly process malformed web content, which would allow a remote attacker to crash a user's application via malicious H.264 video data in an m4v file...

Denial Of Service

Mozilla Firefox is susceptible to denial of services DoS. The attack exists because it does not filter malformed web content, allowing the attacker to inject malicious content to crash or to execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service

Mozilla Firefox is vulnerable to denial of service DoS. It is due to lack of filtering of malformed web content, causing the web page containing malicious content to crash...

CoreGraphics Out-of-Bounds Read Vulnerability in Multiple Apple Products

Apple iOS, iCloud for iOS, and watchOS are products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices. iCloud for Windows is a cloud service based on the Windows platform, which supports the storage of music, photos, apps, and contacts. watchOS is a smartwatch...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

USN-3854-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Arbitrary Password Reset Vulnerability in SeaCMS

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from an arbitrary password reset vulnerability that can be exploited by an attacker to reset passwords...

Hsycms V1.1 has xss vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. An xss vulnerability exists in Hsycms V1.1, which stems from a failure to filter user-submitted data and can be exploited by an...

Apple iTunes < 12.9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209345 advisory. - Visiting a malicious website may lead to address bar spoofing CVE-2018-4440 - Visiting a malicious website may lead...

SDL Web Content Manager 8.5.0 - XML External Entity Injection Vulnerability

Exploit for php platform in category web applications Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Company : Canon Security Date : 25/11/2018 Software Information Affected Software : SDL Web Content Manager Version: Build 8.5.0 Vendor: SDL Tridion Software website :...

SDL Web Content Manager 8.5.0 XML Injection

Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Company : Canon Security Date : 25/11/2018 Software Information Affected Software : SDL Web Content Manager Version: Build 8.5.0 Vendor: SDL Tridion Software website : https://www.sdl.com CVE Number: CVE-2018-19371 Descriptio...

SDL Web Content Manager 8.5.0 - XML External Entity Injection

SDL Web Content Manager 8.5.0 - XML External Entity Injection Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Company : Canon Security Date : 25/11/2018 Software Information Affected Software : SDL Web Content Manager Version: Build 8.5.0 Vendor: SDL Tridion Software websi...

[ASA-201812-10] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-201812-10 ========================================== Severity: Critical Date : 2018-12-14 CVE-ID : CVE-2018-4437 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-834 Summary ======= The package webkit2gtk...

CVE-2018-20127

An issue was discovered in zzzphp cms 1.5.8. delfile in /admin/save.php allows remote attackers to delete arbitrary files via a mixed-case extension and an extra '.' character, because for example "php" is blocked but path=F:/1.phP. succeeds...

OurPHP suffers from an arbitrary file read vulnerability

OurPHP is a web content management system developed using the PHP language. OurPHP V1.8.3 suffers from an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read sensitive files...