CVE-2019-1372

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

Remote code execution

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

CVE-2019-1372

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

CVE-2019-1372

Azure Stack/Azure App Service on Azure Stack is affected by CVE-2019-1372 due to failing to check the length of a buffer before copying memory, enabling a remote code execution that could run code as NT AUTHORITY\SYSTEM inside the sandbox. Public documents consistently describe an RCE by sanitizi...

CVE-2019-1372: Undefined Security Weakness

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

October 2019 Patch Tuesday – 59 vulns, 9 Critical, Azure App Service, Remote Desktop Client, PoC for Windows Error Reporting

This month’s Microsoft Patch Tuesday addresses 59 vulnerabilities with only 9 of them labeled as Critical. Of the 9 Critical vulns, 7 of them are for browsers and scripting engines. The remaining 2 are for Azure App Service and Remote Desktop Client. In addition, PoC code has been published for a...

KLA11655 A remote code execution vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1372 Exploitation Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2019-1372 critical KB list Solution Install...

PT-2019-3648

Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description A remote code execution issue exists due to improper memory object handling in Azure App Service on Azure Stack. This allows an attacker to execute code in the context of NT...

CVE-2018-8600

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

CVE-2018-8600

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

CVE-2018-8600

CVE-2018-8600 is an XSS vulnerability in Microsoft Azure App Services on Azure Stack caused by improper sanitization of user input. Exploitation could allow a remote attacker to execute scripts in the context of the current user when visiting the affected App Service page. Public details in Micro...

Azure App Service Cross-site Scripting Vulnerability

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to the App Service, which will get executed in the context of the...

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: ============= You ha...