MS16-030: Security update for Windows OLE to address remote code execution: March 8, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if Windows OLE fails to properly validate user input. An attacker could exploit the vulnerabilities to execute malicious code after convincing a user to open a specially crafted file or a program from either a webpage or a...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing hackers to replace web pages

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to deficiencies in the implementation of HTTP responses. Exploiting these vulnerabilities allows a malicious actor to replace websites using a specially crafted URL...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

Adobe Flash Player & Compiler Memory Misreference Vulnerability (CNVD-2016-01024)

Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A memory misreference vulnerability exists in Adobe Flash Player& Compiler that could allow a...

UBUNTU-CVE-2016-1724

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1727...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of Microsoft Edge arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack memory corruption using a specially crafted web page...

Apple iOS WebKit COOKIE Read/Write Vulnerability

Apple iOS is Apple's operating system for several smart devices. A security vulnerability exists in Apple iOS that could allow an attacker to construct a malicious web page, trick users into parsing it, and read and write COOKIEs to the target system...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-00539)

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in Apple iOS Webkit, which allows an attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or execute arbitrary code...

Nongyou政务系统erji.aspx 页面SQL注入漏洞

No description provided by source...

marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/deporte/central-de-datos/baloncesto/eurocup/2009alert/XSSPOSED/...

Apple Safari WebKit Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08093)

Apple Safari is a WEB browser developed by Apple. An unspecified memory corruption arbitrary code execution vulnerability exists in Apple Safari WebKit, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple OS X zlib Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in Apple OS X zlib, which allows attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into loading by the user and can be used to execute arbitrary code...

Yahoo mail released to fix XSS attack vulnerability-vulnerability warning-the black bar safety net

Recently, in Yahoo is also considering whether to spin-off Alibaba shares, even in consideration of the sale of Yahoo's core business, including Yahoo mail, sports, website, and advertising technology, Yahoo mail, announced currently the repair had previously been found but not released one...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2015-08099)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer version 11 and Microsoft Edge version, which could allow a remote attacker to execute arbitrary code ...

Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6146)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

MS15-128: Security update for Microsoft graphics component to address remote code execution: December 8, 2015

Resolves vulnerabilities in Microsoft Windows, .NET Framework, Microsoft Office, Skype for Business, Microsoft Lync, and Silverlight. The vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a webpage that contains specially crafted embedded...

MS15-124: Cumulative Security Update for Internet Explorer: December 8, 2015

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.SummaryThis security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code...

Microsoft Internet Explorer and Edge CVE-2015-6155 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...