GitHub Desktop (MacOS) Code Execution Vulnerability

Github Desktop is an application that allows users to interact with GitHub using a GUI rather than a command line or web browser.The GitHub Desktop macOS code execution vulnerability allows attackers to use URLs such as smb or openlocalrepo to implement a 1 click RCE attack, which results in code...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3203 more potentially affected by CVE-2021-32013 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32013 Source advisory: OSV:GHSA-8VCR-VXM8-293M...

CVE-2021-27930

Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated or compromised user to inject malicious JavaScript in folder/file name within the application in order to grab other users’ sessions or execute malicious code in their browsers 1-click RCE...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3203 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

ShareCloud - Share By 1-Click - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application ShareCloud - Share By 1-Click published at the 'play' market has multiple vulnerabilities...

WordPress 1-Click Retweet/Share/Like 5.2 Cross Site Scripting

Title: WordPress '1-click Retweet/Share/Like' Plugin Version: 5.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-21 Download: - https://wordpress.org/plugins/1-click-retweetsharelike/ - https://plugins.svn.wordpress.org/1-click-retweetsharelike/ Notified Vendor/WordPress:...

1 Click Extract Audio v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Extract Audio v2.3.6 - Activex Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1506 Video: http://www.vulnerability-lab.com/getcontent.php?id=1507 Release Date: ============= 2015-06-05 Vulnerabilit...

1 Click Audio Converter 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the...

1 Click Extract Audio 2.3.6 Buffer Overflow

1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1504 http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU...

openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)

Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...