Xc0re Blog will be back, very soon . (07/12/2016)
Update: 2017 => You can find latest posts here… https://www.xc0re.net
Advertisements
September 25, 2012
Will be back soon
About 0x90
Packet Storm Security- Microsoft Edge Chakra InitializeNumberFormat / InitializeDateTimeFormat Type Confusion August 17, 2018The InitializeNumberFormat function in Intl.js is used to initialize an Intl.NumberFormat object, and InitializeDateTimeFormat is used for an Intl.DateTimeFormat object. There are two versions of each initializer. One is for WinGlob and the other is for ICU. The problem is that the versions for ICU don't check whether the given object has been initializ […]
- Microsoft Edge Chakra JIT InlineArrayPush Type Confusion August 17, 2018Microsoft Edge Chakra JIT suffers from a type confusion vulnerability with InlineArrayPush.
- Microsoft Edge Chakra DictionaryPropertyDescriptor::CopyFrom Failed Copy August 17, 2018Microsoft Edge Chakra has an issue where DictionaryPropertyDescriptor::CopyFrom does not copy all fields.
- Microsoft Edge Chakra Parameter Scope Parsing Bug August 17, 2018Microsoft Edge Chakra suffers from a parameter scope parsing bug.
- Microsoft Edge Chakra JIT ImplicitCallFlags Check Bypass August 17, 2018Microsoft Edge Chakra JIT suffers from an ImplicitCallFlags check bypass vulnerability with Intl.
- Silver Peak EdgeConnect 8.1.4.9_65644 XSS / DoS / Disclosure / Traversal August 17, 2018Silver Peak EdgeConnect version 8.1.4.9_65644 suffers from brute force, information leakage, cross site request forgery, cross site scripting, denial of service, default SNMP community string, and path traversal vulnerabilities.
- ADM 3.1.2RHG1 Remote Code Execution August 17, 2018ADM versions 3.1.2RHG1 and below suffer from a remote code execution vulnerability.
- Mikrotik WinBox 6.42 Credential Disclosure August 17, 2018Mikrotik WinBox version 6.42 suffers from a credential disclosure vulnerability.
- CEWE Photoshow 6.3.4 Denial Of Service August 17, 2018CEWE Photoshow version 6.3.4 suffers from a denial of service vulnerability.
- WordPress Dreamsmiths Themes 0.0.1 Arbitrary File Download August 17, 2018WordPress Dreamsmiths Themes version 0.0.1 suffers from an arbitrary file download vulnerability.
- Microsoft Edge Chakra InitializeNumberFormat / InitializeDateTimeFormat Type Confusion August 17, 2018
- Bugtraq
- [SECURITY] [DSA 4276-1] php-horde-image security update August 17, 2018
- [SECURITY] [DSA 4275-1] keystone security update August 17, 2018
- [SECURITY] [DSA 4274-1] xen security update August 17, 2018
- [SECURITY] [DSA 4273-1] intel-microcode security update August 17, 2018
- SEC Consult SA-20180813-0 :: SQL Injection, XSS & CSRF vulnerabilities in Pimcore August 17, 2018
- CSNC-2018-016 - ownCloud iOS Application - Cross-Site Scripting August 15, 2018
Advertisements
Leave a Reply