Linux mincore() discloses uninitialized kernel heap pages. When __walk_page_range() is used on a VM_HUGETLB VMA, callbacks from the mm_walk structure are only invoked for present pages. However, do_mincore() assumes that…
>> CATEGORY: exploit
WordPress Yoast SEO plugin versions prior to 5.8.0 suffer from a cross site scripting vulnerability.
WordPress Breezing Forms plugin version 1.2.7.42 suffers from a cross site scripting vulnerability.
MyTy versions 5.0.4 through 5.1.6 suffer from a remote blind SQL injection vulnerability.
MyTy versions 5.0.4 through 5.1.7 suffer from a cross site scripting vulnerability.
There is a use-after-free security vulnerability in WebCore::TreeScope::documentScope in WebKit.
There is a use-after-free security vulnerability in WebCore::InputType::element in WebKit.
WebKit suffers from an out-of-bounds read in WebCore::RenderText::localCaretRect.
There is a use-after-free security vulnerability in WebCore::PositionIterator::decrement in WebKit.
WebKit suffers from an out-of-bounds read in WebCore::SimpleLineLayout::RunResolver::runForPoint.