PT-2018-16344 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue exists in the JavaScript engine. This can occur when accessing the Creator property of the this.info object. An attacker can trigger this issue by tricking a user into...

SigAnalyzer: Signature analysis with CASC

Executive summary ClamAV Signature Creator CASC is an IDA Pro plugin that assists in the creation of ClamAV pattern signatures. We have enhanced this plugin to also analyze these signatures. The plugin highlights matching parts in a binary when its given a particular signature. This function is...

Easy DVD Creator 2.5.11 Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Easy DVD Creator 2.5.11 - Buffer Overflow in 'Registration UserName Field' SEH Discovery by : Shubham Singh Known As : Spirited Wolf Twitter: @Pwsecspirit Email : email protected Youtube Channel :...

Easy DVD Creator 2.5.11 Buffer Overflow

!/usr/bin/env python Exploit Title : Easy DVD Creator 2.5.11 - Buffer Overflow in 'Registration UserName Field' SEH Discovery by : Shubham Singh Known As : Spirited Wolf Twitter: @Pwsecspirit Email : [email protected] Youtube Channel : www.youtube.com/c/Pentestingwithspirit Discovey Dat...

Camelishing - Social Engineering Tool

Camelishing Social Engineering Tool Features 1. Bulk email sending 2. Basic Python Agent Creator 3. Office Excel Macro Creator 4. DDE Excel Creatoror Custom Payload 5. Return İnformation Mail Open Track Agent Open Track 6. AutoSave 7. Statistics Report 8. User Control Installation Modules $ pip...

Memory Corruption Vulnerability in All-in-One Machine Configuration Software 2.0 of Shenzhen Hanglisheng Technology Co.

Ltd. has been committed to industrial automation product development, production and sales since its inception. The company was formerly a trading company specializing in the agency of foreign industrial control products. There is a memory corruption vulnerability in HMICreator-V2.0, the all-in-o...

Security Bulletin: Apache Commons Collection Java Deserialization Vulnerability in Multiple N series Products

Summary Multiple N series products incorporate the Apache Commons Collection library. Versions of Apache Commons Collection before 3.2.2 and including 4.0 are susceptible to a vulnerability that could be exploited to allow remote attackers to execute arbitrary commands on the system. Multiple N...

WordPress MULTIDOTS Mass Pages/Posts Creator Plugin Denial of Service Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of blogging platform , the platform supports PHP and MySQL server set up a personal blog site . MULTIDOTS Mass Pages/Posts Creator plugin is used in one of the bulk page creation plugin . A security vulnerability...

WordPress Mass Pages/Posts Creator plugin <= 1.2.2 - Stored Cross-Site scripting (XSS) vulnerability

Stored Cross-Site scripting XSS vulnerability found by ThreatPress Research Team in WordPress Mass Pages/Posts Creator plugin versions = 1.2.2. Solution 3 June 2018 - plugin still closed by WordPress Security team, no patched version available...

CVE-2018-11580

An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom content. There is no nonce or user capability check, so anyone can launch a DoS attack against a site a...

Design/Logic Flaw

An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom content. There is no nonce or user capability check, so anyone can launch a DoS attack against a site a...

The DB user's privilege on XenMobile server

Question: What kind of privilege is required for admin which requires when XenMobile DB configuration is done. Answer: Account needs to have the below privileges or else XenMobile cannot do certain action without the permission on the DB. db owner db creator public...

CVE-2018-6585

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filtercreator or filtereventscat parameter...

Multiple Cross-Site Scripting Vulnerabilities in Synology Chat

Synology Chat is an enterprise messaging service that runs on Synology NAS. The solution eliminates the need for users to compose emails and improves the efficiency of corporate communication. Multiple cross-site scripting vulnerabilities exist in Slash Command Creator in Synology Chat. A remote...

CVE-2017-15892

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...

CVE-2017-15892

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...

CVE-2017-15892

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...

DEBIAN-CVE-2017-17787

In GIMP 2.8.22, there is a heap-based buffer over-read in readcreatorblock in plug-ins/common/file-psp.c...

GIMP 'read_creator_block' function heap buffer out-of-bounds read vulnerability

GIMP GNU Image Manipulation Program, GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing, including photo retouching, image compositing and image creation. A security vulnerability...

MS-Word Payload Delivery: Macro Creator

Invoke-MacroCreator is a powershell Cmdlet that allows for the creation of an MS-Word document embedding a VBA macro with various payload delivery and execution capabilities. Description Basically the script supports three types of payload that you MUST specify using the -t argument: 1. shellcode...