14407 matches found
A New Security Paradigm: External Attack Surface Management
Ran Nahmias, Co-founder and CBO, Cyberpion In the past, a web application or online service could be taken at face value by your customers and employees. It was created, developed, and secured by your organization, and every element of the IT infrastructure that supported that service was under...
Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code
The vulnerability of software for modeling, designing, and drawing in AutoCAD relates to the writing of data beyond the buffer during syntax analysis of DWG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created DWG file...
The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.
The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Mitsubishi Electric MELSEC-F Series
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: NULL Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a denial-of-service condition in...
The vulnerability of the library for EXIF-file grammar analysis in libexif, related to the use of memory after its release, allows a perpetrator to access confidential data and also causes service failure.
The vulnerability of the library for EXIF file parsing in libexif is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause service failures...
The vulnerability of the traffic analysis module of the FortiSandbox system allows a perpetrator to execute arbitrary code or commands.
The vulnerability of the traffic analysis module of the FortiSandbox system exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands remotely...
ARTIF - An Advanced Real Time Threat Intelligence Framework To Identify Threats And Malicious Web Traffic On The Basis Of IP Reputation And Historical Data.
ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collecting,...
Bughound - Static Code Analysis Tool Based On Elasticsearch
Bughound is an open-source static code analysis tool that analyzes your code and sends the results to Elasticsearch and Kibana to get useful insights about the potential vulnerabilities in your code. Bughound has its own Elasticsearch and Kibana Docker image that is preconfigured with dashboards ...
Exploit for Classic Buffer Overflow in Microsoft
CVE-2017-7269 iis6 exploit 2017 !imagehttps:/...
Weak Password Vulnerability in Tianrongxin Network Audit System
TA-Net supports multi-dimensional fine-grained network behavior and traffic audit analysis. There is a weak password vulnerability in TA-Net Audit System, which can be exploited by attackers to obtain sensitive information...
IBM Security Access Manager Appliance Privilege License and Access Control Issues Vulnerability
IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. IBM Security Access Manager...
ProxyShell Exploit Chain
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: ccondon-r7 at August 12, 2021 9:19pm UTC reported: Check out the Rapid7 analysis for details on the exploit chain. Seems like a lot of the PoC implementations so far are using admin mailboxes, but I’d imagine folks...
Common WordPress Vulnerabilities and Prevention Through Secure Coding Best Practices
WordPress has experienced exponential growth in the past several years and now holds over 42% of the CMS market share for all major sites. There are over 50,000 plugins available to download in the WordPress repository. That does not include the thousands of premium or open source plugins availab...
The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.
The vulnerability of the PDF syntax analysis implementation of the Autodesk Design Review software relates to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the implementation of syntactic analysis for TGA format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.
The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the implementation of syntactic analysis for DWF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.
The vulnerability of the syntax analysis implementation for DWF format files in the Autodesk Design Review software lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.
The vulnerability of the PDF syntax analysis implementation in the Autodesk Design Review software for applying electronic annotations is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.
The vulnerability of the PDF syntax analysis implementation in the Autodesk Design Review software relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Siemens SINUMERIK ONE and SINUMERIK MC (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINUMERIK ONE and SINUMERIK MC Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE INFORMATION This updated advisory is a follow-up to the...
Etherpad 1.8.13 - Code Execution Vulnerabilities
Etherpad is one of the most popular online text editors that allows collaborating on documents in real-time. It is customizable with more than 250 plugins available and features a version history as well as a chat functionality. There are thousands of instances deployed worldwide with millions of...