CVE-2019-2466

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2466

CVE-2019-2466 affects Oracle Outside In Technology (Outside In Filters) used in IBM Rational DOORS Next Generation. The public details specify that Rational DOORS Next Generation 6.0.6 is affected, with the fix available in 6.0.6 iFix007 or later. The issue is described as an unauthenticated remo...

CVE-2018-2466

CVE-2018-2466 affects SAP Data Services (Impact and Lineage Analysis) v4.2, where the management console fails to sufficiently validate user-controlled inputs, enabling a Cross-Site Scripting (XSS) vulnerability. Documented impact indicates browser-level script execution potential when malicious ...

Easy Chat Server 3.1 Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Easy Chat Server 3.1 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python easychat-exploit.py Spawns reverse meterpreter LHOST=192.168.0.162 LPORT=1990 CVE: CVE-2004-2466 Installer: http://www.echatserver.com/...

Easy Chat Server 3.1 Buffer Overflow

!/usr/bin/python Easy Chat Server 3.1 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python easychat-exploit.py Spawns reverse meterpreter LHOST=192.168.0.162 LPORT=1990 CVE: CVE-2004-2466 Installer: http://www.echatserver.com/ Tested on Windows 7 32b SP1 import sys, socket, ti...

WebKit ComposedTreeIterator::traverseNextInShadowTree Use-After-Free

WebKit: ComposedTreeIterator::traverseNextInShadowTree use-after-free CVE-2017-2466 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on a nightly version of WebKit. The PoC has also been observed to crash Safari 10.0.2 on Mac. PoC:...

WebKit: ComposedTreeIterator::traverseNextInShadowTree use-after-free（CVE-2017-2466）

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on a nightly version of WebKit. The PoC has also been observed to crash Safari 10.0.2 on Mac. PoC: function go d.open = false; d.innerHTML = "foo"; d.open = true; foo ASan log: ==570==ERROR:...

CVE-2017-2466

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41812...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2466

CVE-2017-2466 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Apple patches are documented in HT207600 (Sa...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-2466

CVE-2016-2466 affects the Qualcomm sound driver in Android on Nexus 6 devices, allowing a local attacker to gain privileges via a crafted application. The issue is tied to the Qualcomm Sound Driver before 2016-06-01; exploitation requires local access and user interaction through an app. Android’...

Oracle: Security Advisory (ELSA-2009-1162)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2466

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."...

CVE-2015-2466

CVE-2015-2466 : A remote-code-execution vulnerability in Microsoft Office allows an attacker to execute arbitrary code in the context of the user by persuading them to open a crafted Office template. Affected products include Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 (Word, Excel, Powe...

MS15-081: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3080790)

The remote Windows host has a version of Microsoft Office, Word, Word Viewer, Excel, PowerPoint, Visio, SharePoint Server, Microsoft Office Compatibility Pack, Microsoft Word Web Apps, or Microsoft Office Web Apps installed that is affected by multiple remote code execution vulnerabilities : -...

Microsoft Office CVE-2015-2466 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Ubuntu: Security Advisory (USN-2466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...