OPEN OFFICE suffers from a denial of service vulnerability (CNVD-2020-48556)

OPEN OFFICE is a set of cross-platform office software, can be executed on WINDOWS, LINUX, MACOS, X X11 and SOLARIS and other operating systems, and each of the major office software suite is compatible with a lot of office software are based on it for secondary development. A denial of service...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

: Parallels RAS OS Command Execution

1. Advisory Information Title : Parallels RAS OS Command Execution Advisory ID : CORE-2020-0011 Advisory URL:https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution Date published : 2020-07-23 Date of last update : 2020-07-21 Vendors contacted : Parallels Release mode...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

Airshare - Cross-platform Content Sharing In A Local Network

Airshare is a Python-based CLI tool and module that lets you transfer data between two machines in a local network, P2P, using Multicast-DNS. It also opens an HTTP gateway for other non-CLI external interfaces. It works completely offline! Built with aiohttp and zeroconf. Checkout the demo...

The vulnerability in the cross-platform library LibVNCServer’s component libvncserver/scale.c allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the component libvncserver/scale.c of the cross-platform library LibVNCServer is due to a numerical overflow in pixelvalue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the `libvncserver/translate.c` component of the cross-platform library LibVNCServer allows a attacker to cause a service failure.

The vulnerability of the libvncserver/translate.c component within the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

[SECURITY] Fedora 32 Update: filezilla-3.48.1-1.fc32

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files greater than 4GB - Easy to use Site Manager and transf...

Pocsuite

This repository is an offensive tool for penetration testing and vulnerability assessment. It is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec Security Team. The primary purpose of this tool is to assist penetration testers and...

The vulnerability of the cross-platform library LibVNCServer, which stems from the inability to release resources after their useful period has ended, allows attackers to gain unauthorized access to information.

The vulnerability of the cross-platform library LibVNCServer is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

UPDATE: Covenant v0.5

Covenant v0.5, a major update was released a few hours ago. My last post about this open source, collaborative .NET C2 framework for red teamers was about Covenant v0.4. This is a major update and includes a brand new .NET Core cross-platform implant “Brute” that can be run on Windows, Linux, or...

Fedora: Security Advisory for transmission (FEDORA-2020-e67318b4b4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for transmission (FEDORA-2020-3ef028d53f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: transmission-2.94-9.fc31

Transmission is a free, lightweight BitTorrent client. It features a simple, intuitive interface on top on an efficient, cross-platform back-end...

[SECURITY] Fedora 32 Update: transmission-2.94-9.fc32

Transmission is a free, lightweight BitTorrent client. It features a simple, intuitive interface on top on an efficient, cross-platform back-end...

Adobe Premiere Rush Buffer Overflow Vulnerability

Adobe Premiere Rush is a set of cross-platform video editing software from the U.S. company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Premiere Rush. An attacker could exploit this vulnerability to obtain information...

Microsoft ASP.NET Core Input Validation Error Vulnerability

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

Microsoft .NET Core and .NET Framework Denial of Service Vulnerability

Microsoft .NET Core and Microsoft .NET Framework are both products of the U.S.-based Microsoft Corporation Microsoft. NET Core is a free and open source development platform. NET Core is a free, open source development platform that features multi-language support and cross-platform...

The vulnerability of the Application::runExternalProgram() function, located in app/application.cpp, exposes the cross-platform BitTorrent client qBittorrent to data cleansing vulnerabilities at the operating level. This allows an intruder to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the Application::runExternalProgram function, located in app/application.cpp, in cross-platform BitTorrent clients like qBittorrent, is related to deficiencies in data cleaning measures at the management level. Exploiting this vulnerability could allow an attacker to gain...

[SECURITY] Fedora 30 Update: nss-3.51.1-1.fc30

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...