CVE-2017-8742

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft...

CVE-2017-8632

A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office...

Microsoft Office Web Apps 2013 Service Pack 1 Multiple Vulnerabilities (KB3213562)

This host is missing an important security update according to Microsoft KB3213562 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Advisory - DOS Vulnerability in some Huawei APPs

There is a DoS Vulnerability in some Huawei APPs. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service. Vulnerabili...

Remote Code Execution Vulnerability in Multiple Microsoft Products

Microsoft PowerPoint 2007 SP3 are products of Microsoft Corporation.Microsoft PowerPoint 2007 SP3 is a document presentation tool in the Office suite; SharePoint Server 2013 SP1 is an enterprise business collaboration platform; Office Web Apps 2010 SP2 is a Web-based office software suite. A remo...

Microsoft Office Web Apps 2010 Service Pack 2 Multiple Vulnerabilities (KB3213632)

This host is missing a critical security update according to Microsoft KB3213632. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft Office Online Server and Office Web Apps (September 2017)

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle object...

Security Update for Microsoft Office Web Apps Server 2013 (KB3213562)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB3213562) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2010 Office Web Apps: September 12, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

PT-2017-2960 · Microsoft · Office Web Apps +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office Web Apps versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft SharePoint Server versions affected versions not specified Microsoft Office Compatibility Pack versions...

PT-2017-2959 · Microsoft · Excel For Mac +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel for Mac affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Compatibility...

A week in security (September 4 – September 10)

Last week, we looked into expired domain names being used for malvertising, delved into dubious Facebook apps, and checked out Chinese seminar scams. We also explained the whys and wherefores of false positives, explained what Google is doing with HTTPs, warned you away from a fake DHS email, and...

Facebook worries: I didn’t post that

It is my assumption that most Facebook users don’t look at their own profile often. With your own profile, I mean the timeline that shows up when you click your own name or avatar in the Facebook menu. That’s because we think we know exactly what is posted there, so why bother to look at it? Afte...

Huawei VMall Override Vulnerability

Huawei VMall is Huawei's e-commerce platform for nationwide services. Huawei VMall suffers from an overstepping vulnerability, which can be exploited by local attackers who do not have access privileges to trick users into installing malicious mobile applications, sending outbound HTTP requests a...

Huawei Phone App Lock Bypass Vulnerability

Huawei Honor 7 Lite is a smartphone product of Huawei China. App Lock is a feature in the Phone Manager App that effectively prevents others from using apps on your phone without permission. An application lock feature bypass vulnerability exists on the Huawei Honor 7 Lite phone. An attacker can...

FAQ: Citrix Virtual Apps and Desktops Long Term Service Release (LTSR)

Table of Contents General LTSR Information LTSR upgrades Mixing LTSR, CR, and Cloud releases Support lifecycles LTSR compliance Citrix Workspace app LTSR Release timing Other considerations and resources General LTSR Information What’s new and what’s changed with the Citrix Virtual Apps and...

Mobile WireX DDoS Botnet 'Neutralized' by Collaboration of Competitors

A collaboration between leading content delivery networks and technology companies—some of them competitors—is in the midst of shutting down the largest botnet of mobile devices ever recorded. The WireX botnet was detected on Aug. 17 after businesses in a number industries, most notably...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend AppsLinkController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end AppsLinkController.class.php page. The vulnerability is due to the public function del...

A Company Offers $500,000 For Secure Messaging Apps Zero-Day Exploits

How much does your privacy cost? It will soon be sold for half a Million US dollars. A controversial company specialises in acquiring and reselling zero-day exploits is ready to pay up to US$500,000 for working zero-day vulnerabilities targeting popular secure messenger applications, such as...