Google Chrome Blink Security Bypass Vulnerability (CNVD-2017-02229)

Google Chrome is a Web browser developed by Google, Inc. Blink is a browser layout engine rendering engine jointly developed by Google, Inc. and Norway's OperaSoftware. A security vulnerability exists in Blink in Google Chrome, which arises from the program's failure to enforce the unsafe-inline...

Google Chrome FFmpeg Heap Overflow Code Execution Vulnerability (CNVD-2017-02110)

Google Chrome is a popular web browser. Google Chrome handles a heap overflow code execution vulnerability in FFPMEG, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page and trick users into parsing it, which can crash the application or execute arbitrary...

UBUNTU-CVE-2017-5012

A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

chromium-browser: universal xss in chrome://downloads

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page...

Adobe Acrobat and Reader Out of Bounds Read (APSB17-01: CVE-2017-2946)

An out-of-bounds read vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded JPEG2000 images in a PDF document. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a...

MS14-036: Description of the security update for Office 2010: August 12, 2014

MS14-036: Description of the security update for Office 2010: August 12, 2014 INTRODUCTION Microsoft has released security bulletin MS14-036. To learn more about this security bulletin: Home users: https://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download the updates f...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of The Chakra JavaScript browser extension in Microsoft Edge arises from the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially...

Morpheus - Automated Ettercap TCP/IP Hijacking Tool

Morpheus framework automates tcp/udp packet manipulation tasks by using etter filters to manipulate target requests/responses under MitM attacks replacing the tcp/udp packet contents by our contents befor forward the packet back to the target host... workflow: 1º - attacker - arp poison local lan...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of the Chakra JavaScript browser extension provided by Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption throug...

Change "User Name" text at login page

In order to avoid confusion for users we need to change the text on the StoreFront webpage from "User Name" to "eID" in order to match nomenclature in use at our university...

Adobe Reader DC JPEG2000 Out-of-Bounds Read (CVE-2016-7854)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper handling of JPEG2000 images, and could be used to gain sensitive information that may help in further attacks. A remote attacker could exploit this vulnerability by enticing a user to open...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

Microsoft Internet Explorer and Edge CVE-2016-7282 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the atmfd.dll library in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page from a remote location...

gerry.vanagon.com XSS vulnerability

Vulnerable URL: http://gerry.vanagon.com/cgi-bin/wa.exe?SHOWTPL=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

Chrome Blink SpeechRecognitionController Use-After-Free Exploit

A specially crafted web-page can cause the blink rendering engine used by Google Chrome and Chromium to continue to use a speech recognition API object after the memory block that contained the object has been freed. An attacker can force the code to read a pointer from the freed memory and use...

Internet Explorer help

None None...

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

Microsoft Internet Explorer and Edge CVE-2016-7227 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...

Microsoft Windows Animation Manager Memory Corruption (MS16-132: CVE-2016-7205)

A memory corruption vulnerability exists in Microsoft Windows. The vulnerability is due to an error in the way the Windows Animation Manager handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a malicious webpage...