Yandex Browser Address Bar Spoofing Vulnerability

Yandex Browser is a browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser versions prior to 16.9.0. The vulnerability can be exploited by remote attackers to spoof the contents of the address bar with the help of the window.open file...

CVE-2017-7325

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

Phabricator: Window.opener protection Bypass

SUMMURY ======== If you create a post/comment with a link like http://x.com in fabricator then server add rel="norefferrer" to anchor tag . So child window dont have access to parent window. But it can be bypassed with url like /\x.com/index.php and child window can change the location property o...

CVE-2018-2677

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2018-02213)

Oracle Java SE is a standard version of Oracle's Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. both Java SE and Java SE Embedded are components of Java SE Embedded is a Java platform for embedded systems. Java...

libgcrypt11 Data Compromise

The vulnerability of the libgcrypt11 library is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to compromise the confidentiality of data by fully recovering the RSA key, using a sliding window technique from left to right...

CVE-2017-15714

The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "format=%27;alert%27xss%27" to the URL an alert window would execute...

TP-Link TL-SG108E XSS / Weak Access Control

Overview ------------- Three vulnerabilities have been discovered in the TP-Link TL-SG108E, firmware 1.0.0 Build 20160722 Rel.50167: CVE-2017-17745 - Cross Site Scripting XSS in systemnameset.cgi, sysName parameter CVE-2017-17746 - Weak access control for user authentication CVE-2017-17747 - Weak...

CVE-2017-0831

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

CVE-2017-0831

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

CVE-2017-0831

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

CVE-2017-0831

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

Infogram: Persistent XSS in share button

Persistent XSS in "Share" button was found: 1. In custom link field for "Share" button add: ". 2. Share the infographic publicly, navigate to its public URL and click the "Share" button. 3. See that pop-up window activates...

CVE-2017-0831: Incorrect Permission Assignment for Critical Resource

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

Race condition

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By...

kernel: Divide-by-zero in __tcp_select_window

A divide-by-zero vulnerability was found in the tcpselectwindow function in the Linux kernel. This can result in a kernel panic causing a local denial of service...

X.Org Server: Multiple vulnerabilities

Background The X.Org project provides an open source implementation of the X Window System. Description Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact Attackers could execute arbitrary code or cause a Denial of Servi...