30 matches found
CVE-2019-9892
CVE-2019-9892 affects Open Ticket Request System (OTRS) versions 5.x (up to 5.0.34), 6.x (up to 6.0.17), and 7.x (up to 7.0.6). An agent with appropriate permissions can import a specially crafted Report Statistics XML, triggering an XML External Entity (XXE) processing flaw that may cause the sy...
[SECURITY] [DLA 1774-1] otrs2 security update
Package : otrs2 Version : 3.3.18-1+deb8u9 CVE ID : CVE-2019-9892 A flaw was discovered in OTRS, the Open Ticket Request System. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading o...
CVE-2017-9892
CVE-2017-9892 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can cause a denial of service and, possibly, otherImpact, due to heap/memory handling issues as described in the vulnerability details (notably data from faulting address influencing heap/control flow). The is...
CVE-2017-9892
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...
CVE-2016-9892
CVE-2016-9892 affects the esets_daemon service in ESET Endpoint Antivirus for macOS prior to 6.4.168.0 and Endpoint Security for macOS prior to 6.4.168.0. Root cause is improper verification of X.509 certificates from the edf.eset.com SSL server, enabling MITM attackers to spoof the server and pr...
CVE-2016-9892
creationtimestamp| type| source ---|---|--- 2017-02-28 12:16:51+00:00| published-proof-of-concept| https://t.me/canyoupwnme/854 2017-02-28 12:50:02+00:00| published-proof-of-concept| https://t.me/HackerOne/556 2017-03-01 13:55:00+00:00| seen| https://t.me/webamoozir/1338 2026-07-26 07:02:09+00:00...
Critical Flaw in ESET Antivirus Exposes Mac Users to Remote Hacking
What could be more exciting for hackers than exploiting a vulnerability in a widely used software without having to struggle too much? One such easy-to-exploit, but critical vulnerability has been discovered in ESET's antivirus software that could allow any unauthenticated attackers to remotely...
ESET Endpoint Antivirus 6 Remote Code Execution Exploit
Exploit for windows platform in category remote exploits CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 --------------------------------------------------------------------------- Summary ======= Name: Remote Code Execution as Root via ESET Endpoint Antivirus 6 CVE:...
ESET Endpoint Antivirus 6 Remote Code Execution
CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 --------------------------------------------------------------------------- Summary ======= Name: Remote Code Execution as Root via ESET Endpoint Antivirus 6 CVE: CVE-2016-9892 Discoverers: Jason Geffner and Jan Bee Vendo...
CVE-2014-9892
The CVE-2014-9892 issue affects the Linux kernel (up to 4.7) in the snd_compr_tstamp path used by Android on Nexus 5/7 devices. Root cause: snd_compr_tstamp does not initialize a timestamp data structure, enabling a crafted app to obtain sensitive information. Impact: information disclosure possi...