41 matches found
PT-2024-29212
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The Linux kernel has a vulnerability related to the creation of PMD-sized page cache. On ARM64 systems, when the base page size is 64KB, HPAGE PMD ORDER is 13, which cannot be supported by...
SUSE CVE-2024-27036
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix writeback data corruption cifs writeback doesn't correctly handle the case where cifsextendwriteback hits a point where it is considering an additional folio, but this would overrun the wsize - at which point it drops o...
UBUNTU-CVE-2024-27036
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix writeback data corruption cifs writeback doesn't correctly handle the case where cifsextendwriteback hits a point where it is considering an additional folio, but this would overrun the wsize - at which point it drops o...
PT-2023-8384 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A Null pointer dereference problem was found in the ida free function in the lib/idr.c file of the Linux Kernel. This issue may allow an attacker using this library to cause a denial o...
kernel: XArray: Fix xas_create_range() when multi-order entry present
In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xascreaterange when multi-order entry present If there is already an entry present that is of order = XACHUNKSHIFT when we call xascreaterange, xascreaterange will misinterpret that entry as a node and dereference...
(CVE-2014-3501/2/3) Apache Cordova for Android - Multiple Vulnerabilities
Hi, We have recently discovered a severe Cross-Application Scripting XAS vulnerability in Apache Cordova for Android. This vulnerability enables theft of sensitive information from Crodova-based apps both locally by malware and also remotely by using drive-by exploitation techniques. In addition,...
Apple Quicktime /w IE .qtl Version XAS - Remote Exploit PoC
No description provided by source. !-- Performing XAS Cross Application Scripting attacks automatically read no user interaction is very easy, as I showed before in my shutting down skype proof-of-concept. But, what if you are using a limited web environment, where you can't use iframes or script...
Dolphin Browser HD / Opera Mobile XAS
Application can access browser's data...
Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC
No description provided by source. !-- Performing XAS Cross Application Scripting attacks automatically read "no user interaction" is very easy, as I showed before in my "shutting down skype" proof-of-concept...
Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC
Exploit for unknown platform in category remote exploits ========================================================= Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC ========================================================= embed sr...
Apple QuickTime /w IE .qtl Version XAS - Remote
milw0rm.com 2007-09-18...
Apple QuickTime w IE .qtl Version XAS - Remote
Apple QuickTime w IE .qtl Version XAS - Remote milw0rm.com 2007-09-18...
Cross site scripting
Multiple cross-application scripting XAS vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory...
CVE-2007-4824
Multiple cross-application scripting XAS vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory...
CVE-2007-4824
Multiple cross-application scripting XAS vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory...
CVE-2007-4824
Technical details about CVE-2007-4824 are not publicly available in the provided documents. No concrete affected products, versions, or exploit information are provided; monitor for updates.
CVE-2005-2442
Cross-Application Scripting XAS vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another...
CVE-2005-2442
CVE-2005-2442 concerns a Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196. The connected documents confirm the issue arises in WebInspect and enables remote attackers to inject Javascript from one application into another (XAS), with remote exploitation described...
KLA10391 CI vulnerability in WebInspect
An XAS vulnerability was found in WebInspect. By exploiting this vulnerability malicious users can inject from one application to another. This vulnerability can be exploited remotely. Original advisories - Related products WebInspect CVE list CVE-2005-2442 warning Solution Update to latest versi...