Xxe

UML Designer version = 8.0.0 contains a XML External Entity XXE vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file...

CVE-2018-1000837

CVE-2018-1000837 affects UML Designer

openSUSE Security Update : phpMyAdmin (openSUSE-2018-1547)

This update for phpMyAdmin fixes security issues and bugs. Security issues addressed in the 4.8.4 release bsc1119245 : - CVE-2018-19968: Local file inclusion through transformation feature - CVE-2018-19969: XSRF/CSRF vulnerability - CVE-2018-19970: XSS vulnerability in navigation tree This update...

Security update for phpMyAdmin (moderate)

This update for phpMyAdmin fixes security issues and bugs. Security issues addressed in the 4.8.4 release bsc1119245: - CVE-2018-19968: Local file inclusion through transformation feature - CVE-2018-19969: XSRF/CSRF vulnerability - CVE-2018-19970: XSS vulnerability in navigation tree This update...

WordPress wp-contactpage-designer 1.0 Database Disclosure

Exploit Title : WordPress wp-contactpage-designer Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 03/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Versio...

INVT Electric VT-Designer Code Execution Vulnerability

INVT Electric VT-Designer is a graphical development tool from INVT Electric China. A security vulnerability exists in INVT Electric VT-Designer version 2.1.7.31. A remote attacker could exploit the vulnerability to cause the program to crash or execute code...

INVT Electric VT Designer Detection (Windows SMB Login)

SMB login-based detection of INVT Electric VT Designer. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

INVT Electric VT-Designer Heap Buffer Overflow Vulnerability

INVT Electric VT-Designer is a graphical development tool from INVT Electric China. A heap buffer overflow vulnerability exists in INVT Electric VT-Designer version 2.1.7.31. A remote attacker could exploit this vulnerability to cause a program crash or code execution...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

Remote code execution

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

Heap overflow

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18983

CVE-2018-18983 affects VT-Designer 2.1.7.31. The issue is a heap-based buffer overflow caused when the program reads the contents of a file already in memory into another heap buffer, potentially crashing the process or enabling remote code execution. Documented sources (NVD/CVE record, CNVD, NVD...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18987

INVT Electric VT-Designer 2.1.7.31 is affected by a deserialization of untrusted data vulnerability that can be triggered by processing input from a file, allowing attacker-controlled data to be written to memory and potentially crash the program or execute arbitrary code. Public write-ups consis...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

INVT Electric VT-Designer

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: INVT Electric Equipment: VT-Designer Vulnerabilities: Deserialization of Untrusted Data, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause...

(0Day) INVT Electric VT-Designer PM3 File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...