evolutionwindowfilms.com Cross Site Scripting vulnerability OBB-1417807

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

How private is a private window?

Privacy How private is a private window? Share October 15th, 2020 Alice and Bob find themselves in a shared living-space, where long-held secrets are at risk of being revealed. TL;DR: skip to the conclusions to see what Alice learned. The Privacy Problem Alice and Bob recently decided to take the...

GHSA-56PC-6JQP-XQJ8 Context isolation bypass in Electron

Impact Apps using both contextIsolation and sandbox: true are affected. Apps using both contextIsolation and nativeWindowOpen: true are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context an...

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

...

The Apache HTTP Server when accessed through a TCP connection with a large window size allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties who state that the large window size required by the attack is not normally supported or configured by the server or that a DDoS-style attack would accomplish the same goal

...

Google Android Information Disclosure Vulnerability (CNVD-2020-54305)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version of Window Manager, which stems from a privilege bypass that allows an attacker to leak local information...

Sandbox Bypass

firefox is vulnerable to sandbox bypass. Until explicitly accessed by script, window.global.This is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames window. Sites that deploy a sandboxing that depends on enumerating and freezing access to the window objec...

CVE-2020-0308

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0308

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0267

In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a malicious app instead of the one the user intended, with no additional execution privileges needed. User interaction is needed for...

Design/Logic Flaw

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0308

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0308

CVE-2020-0308 affects the Android 11 Window Manager. The root cause is an unsafe PendingIntent that enables a permission bypass, allowing local information disclosure without user interaction. Vulnerable component: Window Manager (Android-11). Impact: information disclosure with user privileges; ...

CVE-2020-0308: Undefined Security Weakness

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

PT-2020-11661

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the Window Manager due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileges for exploitation...

PT-2020-6054

Name of the Vulnerable Software and Affected Versions Wonderware InTouch affected versions not specified Description The issue is related to a buffer overflow in the stack of the HMI Window Maker SCADA system's application development module. Exploitation of this issue could allow an attacker to...

PT-2020-6053

Name of the Vulnerable Software and Affected Versions Wonderware InTouch affected versions not specified Description The issue is related to a buffer overflow in the heap of the HMI Window Maker SCADA system's application development module. Exploitation of this issue could allow an attacker to...

PT-2020-6859 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw found in the dataWindowForTile function of IlmImf/ImfTiledMisc.cpp can trigger an integer overflow when a crafted file is processed, leading to an out-of-bounds write on the heap. Th...

Mozilla: Attacker-induced prompt for extension installation

By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious...

openSIS SQL Injection Vulnerability (CNVD-2020-50951)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the DownloadWindow.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...