Trojan.Win32.Gentee.b Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/86e63bb63f3baf48ad3bf24c3f5b7e40.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.b Vulnerability: Insecure Permissions EoP Description: Trojan creates a vuln dir...

CVE-2020-0072

The CVE-2020-0072 issue affects Android devices (Android 8.0–10) in rw_t2t_handle_tlv_detect_rsp within rw_t2t_ndef.cc, where a missing bounds check allows an out-of-bounds write that could enable remote code execution over NFC without user interaction. The NVD/Android bulletin context confirms h...

Important Photon OS Security Update - PHSA-2020-3.0-0072

Updates of 'libgd' packages of Photon OS have been released...

CVE-2019-0072

Summary: CVE-2019-0072 describes an information-disclosure vulnerability in Juniper Networks SBR Carrier related to the identity and access management certificate generation procedure. Affected versions are 8.4.1 before 8.4.1R13 and 8.5.0 before 8.5.0R4. The issue arises from unprotected storage ...

Photon OS 2.0: Linux PHSA-2018-2.0-0072 (deprecated)

An update of 'linux-aws', 'linux', 'linux-esx', 'linux-secure' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0072. The te...

Important Photon OS Security Update - PHSA-2018-0072

Updates of 'linux', 'linux-esx', 'linux-aws', 'linux-secure' packages of Photon OS have been released...

CVE-2015-0072

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ieuxssinjection.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:34+00:00| seen|...

CVE-2014-0072

ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin org.apache.cordova.file-transfer before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through 2.9.0 might allow remote attackers to spoof SSL servers by leveraging a default value of true for the...

CVE-2014-0072

ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin org.apache.cordova.file-transfer before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through 2.9.0 might allow remote attackers to spoof SSL servers by leveraging a default value of true for the...

CVE-2014-0072

CVE-2014-0072 affects the Apache Cordova File-Transfer stack on iOS. The File-Transfer plugin for iOS (Cordova 2.4.0–2.9.0) and the standalone File-Transfer plugin (org.apache.cordova.file-transfer) prior to 0.4.2 default the trustAllHosts option to true, allowing remote attackers to spoof SSL se...

CVE-2013-0072

...

CVE-2017-0072

creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41654...

Remote code execution

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Window...

CVE-2017-0072

CVE-2017-0072 maps to a Uniscribe (USP10.dll) vulnerability in the Windows font handling path. Connected exploits show a heap memory corruption in USP10!MergeLigRecords triggered during text rendering with untrusted fonts, illustrating a remote code execution class. Public proofs-of-concept exist...

MS17-011: Security Update for Microsoft Uniscribe (4013076)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...

Microsoft Windows Uniscribe CVE-2017-0072 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...

Mageia: Security Advisory (MGASA-2016-0072)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0061, CVE-2016-0063,...

CVE-2016-0072

Technical details for CVE-2016-0072 are not provided in the connected documents. The available sources describe IE memory corruption/remote code execution risks in general terms for IE 9–11, but do not include product/version-specific root cause, vulnerable component, impact, or remediation for t...

Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0072)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...