Microsoft Internet Explorer CVE-2015-0070 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to view content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information or aid in further...

JVN#96155055: PerlTreeBBS vulnerable to cross-site scripting

PerlTreeBBS from Homepage Decorator is a tree-structured bulletin board software. PerlTreeBBS contains a persistent cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according ...

RHEL 6 : flash-plugin (RHSA-2015:0140)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0140 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

The popular game "heroes Union" and then exposed vulnerabilities: hackers can access player accounts to steal credits and coins-vulnerability warning-the black bar safety net

Famous foreign community Reddit recently broke the popular game "heroes Union" （LOL）one of the exploit programs exploit, the attacker can access the player account via a Web browser to open the in-game store for credits or gold transactions. Vulnerability description Initially this vulnerability ...

Enter: CSRF token leakage

Hi, I have noticed that when the account verification fails here : https://wallet.robocoin.com/verify/ due to an error, the CSRF token is being leaked via GET method like : https://wallet.robocoin.com/verify/id?csrf=b8ede20d-0c0b-4e16-9d05-6ad2ed8b72c4 So the authenticity token is being stored in...

[SECURITY] Fedora 21 Update: firefox-35.0.1-3.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RHEL 5 / 6 : flash-plugin (RHSA-2015:0094)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00668)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. The SimplifiedLowering::DoLoadBuffer function in the Google V8 compiler/simplified-lowering.cc in versions of Google Chrome prior to 40.0.2214.91 fails to selec...

CentOS Update for firefox CESA-2015:0046 centos6

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882096";...

CentOS Update for firefox CESA-2015:0046 centos5

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882091";...

UBUNTU-CVE-2014-7936

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...

MegaChat — Kim Dotcom launches end-to-end encrypted Video Calling Service

Are you worried about your privacy? Its Obvious because of a Hacker or the government could be snooping in your emails, voice or video calls. The Famous Internet entrepreneur Kim Dotcom, who introduced legendary Megaupload and Mega file sharing services to the World, has now released its latest...

Mozilla Firefox/SeaMonkey Web Audio Denial of Service Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. A denial of service vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited by an attacker to crash the application, cause a denial of service or launch further attacks to obtain sensitive information...

CentOS 5 / 6 / 7 : firefox / xulrunner (CESA-2015:0046)

Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

[SECURITY] Fedora 20 Update: firefox-35.0-2.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 21 Update: firefox-35.0-2.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2015:0046 Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring...

Debian Security Advisory DSA 3127-1 (iceweasel - security update)

Multiple security issues have been found in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3127.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3127-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks Gm...

Critical: Red Hat Security Advisory: firefox security and bug fix update

Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...