[SECURITY] Fedora 30 Update: firefox-68.0.2-1.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

USN-4101-1: Firefox vulnerability

It was discovered that passwords could be copied to the clipboard from the "Saved Logins" dialog without entering the master password, even when a master password has been set. A local attacker could potentially exploit this to obtain saved passwords...

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla Project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to view a specially...

CVE-2019-1057

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...

PT-2019-3039

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services MSXML affected versions not specified Description A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could r...

Microsoft Office SharePoint CVE-2019-1203 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

CentOS Control Web Panel 0.9.8.836 Remote Command Execution Vulnerability

Exploit for linux platform in category web applications Exploit Title: CWP CentOS Control Web Panel 0.9.8.836 - Remote Command Execution Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage: https://control-webpanel.com/ Version: 0.9.8.836 Tested on:...

CentOS-WebPanel.com Control Web Panel 0.9.8.836 Remote Command Execution

Exploit Title: CWP CentOS Control Web Panel 0.9.8.836 - Remote Command Execution Date: 6 July 2019 Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage: https://control-webpanel.com/ Version: 0.9.8.836 Tested on: CentOS 7.6.1810 Core CVE : CVE-2019-133...

Google Chrome < 76.0.3809.87 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 76.0.3809.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 201907stable-channel-update-for-desktop30 advisory. - Insufficient filtering in URI schemes in Google Chrome on Windows prior to...

CVE-2007-6763

SAS Drug Development SDD before 32DRG02 mishandles logout actions, which allows a user who was previously logged in to access resources by pressing a back or forward button in a web browser...

[SECURITY] Fedora 29 Update: firefox-68.0-4.fc29

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla: Use-after-free with HTTP/2 cached stream

A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

Debian: Security Advisory (DSA-4479-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for firefox FEDORA-2019-a1b709fca0

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: firefox-68.0-4.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Tenda D301 v2 Modem Router - Persistent Cross-Site Scripting

Tenda D301 v2 Modem Router - Persistent Cross-Site Scripting Exploit Title: tenda D301 v2 modem router stored xss CVE-2019-13492 Exploit Author: ABDO10 Date : July, 11th 2019 Product : Tenda D301 v2 Modem Router version : v2 Vendor Homepage:...

Cross site scripting

Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...

CVE-2019-13029

Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2019-22627)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox suffers from an information disclosure vulnerability that can be...

Microsoft DirectWrite AFDKO - Heap-Based Out-of-Bounds ReadWrite in OpenType Font Handling Due to Empty ROS Strings

Microsoft DirectWrite AFDKO - Heap-Based Out-of-Bounds ReadWrite in OpenType Font Handling Due to Empty ROS Strings -----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font...