CommuniGatePro 6.1.16 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
CommuniGatePro version 6.1.16 suffers from multiple stored cross site scripting vulnerabilities.
Archive for November, 2017
CSC Cart 4.6.2 Shell Upload
Posted by deepcore under exploit (No Respond)
CSC Cart version 4.6.2 suffers from a remote shell upload vulnerability.
WebKit WebCore::RenderObject::previousSibling Use-After-Free
Posted by deepcore under exploit (No Respond)
WebKit suffers from a use-after-free vulnerability in WebCore::RenderObject::previousSibling.
WebKit WebCore::FormSubmission::create Use-After-Free
Posted by deepcore under exploit (No Respond)
WebKit suffers from a use-after-free vulnerability in WebCore::FormSubmission::create.
Microsoft Edge Chakra JIT BailOutOnTaggedValue Bailouts
Posted by deepcore under exploit (No Respond)
Microsoft Edge Chakra JIT BailOutOnTaggedValue bailouts can be generated for constant values.
Microsoft Edge Chakra JIT GlobOpt::OptTagChecks Property Consideration
Posted by deepcore under exploit (No Respond)
Microsoft Edge Chakra JIT GlobOpt::OptTagChecks must consider IsLoopPrePass properly.
Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared Failed Return
Posted by deepcore under exploit (No Respond)
Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared does not return the return instruction.
Microsoft Edge Chakra JIT Incorrect Function Declaration Scope
Posted by deepcore under exploit (No Respond)
Microsoft Edge Chakra JIT suffers from an incorrect function declaration scope.
Linux mincore() Kernel Heap Page Disclosure
Posted by deepcore under exploit (No Respond)
Linux mincore() discloses uninitialized kernel heap pages. When __walk_page_range() is used on a VM_HUGETLB VMA, callbacks from the mm_walk structure are only invoked for present pages. However, do_mincore() assumes that it will always get callbacks for all pages in the range passed to walk_page_range(), and when this assumption is violated, sys_mincore() copies uninitialized memory from […]
[local] ALLPlayer 7.5 – Local Buffer Overflow (SEH Unicode)
Posted by deepcore under Security (No Respond)