31109 matches found
Description of the security update for SharePoint Foundation 2013: May 9, 2017
Description of the security update for SharePoint Foundation 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Application compatibility update for Windows 7 and Windows Server 2008 R2: May 2013
Application compatibility update for Windows 7 and Windows Server 2008 R2: May 2013 Introduction The Windows application compatibility update is a software update that improves the compatibility experience in Windows 7 and Windows Server 2008 R2. Microsoft regularly releases Windows compatibility...
Compatibility update is available for Windows RT, Windows 8, and Windows Server 2012: May 2013
Compatibility update is available for Windows RT, Windows 8, and Windows Server 2012: May 2013 Summary This compatibility update improves the compatibility experience in Windows RT, Windows 8, and Windows Server 2012. Microsoft regularly releases Windows compatibility updates to improve the overa...
February 6, 2018, update for Office 2013 (KB4011700)
February 6, 2018, update for Office 2013 KB4011700 This article describes update 4011700 for Microsoft Office 2013 that was released on February 6, 2018. This update also applies to Office Home and Student 2013 RT. This update has a prerequisite. Be aware that the update in the Microsoft Download...
Exploit for CVE-2013-0422
K8tools 20190521 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 博客: https://www.cnblogs.com/k8gege 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 综合工具 K8飞刀Final.rar + K8data.mdb K8飞刀漏洞数据库20190402 + K8expList.txt...
CVE-2013-7488
creationtimestamp| type| source ---|---|--- 2020-04-07 23:18:26+00:00| seen| https://t.me/cibsecurity/11092...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
CVE-2013-7488 affects perl-Convert-ASN1 (Convert::ASN1) through 0.27. Connected Nessus advisories from MiracleLinux, Alibaba Cloud Linux, TencentOS/TencentOS Server, Oracle Linux, Red Hat/CentOS/AlmaLinux, and Astra Linux reference that updates exist to fix this issue, citing “infinite loop via u...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
DrayTek Vigor2700 Series < 2.8.4 Javascript Injection Vulnerability
Multiple DrayTek Vigor Routers are prone to a javascript injection vulnerability. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publish...
FreeBSD : rubygem-json -- Unsafe Objection Creation Vulnerability in JSON (Additional fix) (40194e1c-6d89-11ea-8082-80ee73419af3)
When parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269. The previous fix was incomplete, which addressed JSON.parseuserinput, but didn't address some other...
Denial Of Service (DoS)
The JSON gem is vulnerable to denial of service. An attacker is able to create arbitrary objects in the target system using malicious JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects. This can potentially result in a denial of service condition. This...
EulerOS 2.0 SP5 : ntp (EulerOS-SA-2020-1314)
According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic amplification via forg...
CVE-2013-7487
creationtimestamp| type| source ---|---|--- 2020-03-21 06:32:06+00:00| seen| https://t.me/cibsecurity/10667...
CVE-2013-7487
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...
rubygem-json -- Unsafe Objection Creation Vulnerability in JSON (Additional fix)
When parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269. The previous fix was incomplete, which addressed JSON.parseuserinput, but didn’t address some other...
Unsafe Object Creation Vulnerability in JSON (Additional fix)
When parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269. The previous fix was incomplete, which addressed JSON.parseuserinput, but didn’t address some other...