[SECURITY] Fedora 25 Update: libmwaw-0.3.12-1.fc25

libmwaw is a library for import of old Mac documents. It supports many kinds of text documents, spreadsheets, databases, vector and bitmap images. Supported are, for example, documents created by BeagleWorks, ClarisWorks, MacPaint, MacWrite or Microsoft Word for Mac. A full list of supported...

Nitro Pro PDF - Multiple Vulnerabilities

Nitro Pro PDF - Multiple Vulnerabilities Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you chan...

OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)

It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak...

UBUNTU-CVE-2017-9765

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...

Oracle E-Business Suite Flaw Allows Downloads of Documents

Oracle admins have more than 300 patches to contend with today, but one that should be considered a top priority is a bug in the E-Business Suite of business applications that could allow an attacker to download data without the need for authentication. The vulnerability, CVE-2017-10244, was...

CVE-2017-7664

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0...

Code injection

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0...

Xxe

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...

CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...

CVE-2017-1000021

LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting i...

Microsoft WordPad Remote Code Execution Vulnerability

Microsoft Windows is a popular computer operating system. Microsoft Windows Wordpad has a security vulnerability in the parsing of constructed documents that could be exploited by an attacker to submit a special file that crashes the application or executes arbitrary code...

Poppler Integer Overflow Vulnerability

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. An integer overflow vulnerability exists in the JPEG 2000 image parsing feature in Poppler version 0.53.0. An attacker can exploit this vulnerability to overwrite the heap across boundaries and execu...

Attack on Critical Infrastructure Leverages Template Injection

Contributors: Sean Baird, Earl Carter, Erick Galinkin, Christopher Marczewski & Joe Marshall Executive SummaryAttackers are continually trying to find new ways to target users with malware sent via email. Talos has identified an email-based attack targeting the energy sector, including nuclear...

Gather PDF Authors

This module downloads PDF documents and extracts the author's name from the document metadata. This module expects a URL to be provided using the URL option. Alternatively, multiple URLs can be provided by supplying the path to a file containing a list of URLs in the URLLIST option. The URLTYPE...

Paragon Initiative Enterprises: [Critical] billion dollars issue

Hey, My name is El-Sisi also i have famous name is بلحه Balaha and i have found documents that confirm you the github inc belong to you. if you need this documents give me reward and i will give u that documents. why i'm doing this because my mother tell me if you see some things like that you mu...

wheatisp.org XSS vulnerability

Vulnerable URL: http://www.wheatisp.org/Documents/DOCoffspringlist.php?experimentidname=1"...

Threat Outbreak Alert RuleID29559: Email Messages Distributing Malicious Software on June 21, 2017

Medium Alert ID: 54267 First Published: 2017 June 21 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29559 may contain the following files: Name | Siz...

[SECURITY] Fedora 26 Update: libmwaw-0.3.11-3.fc26

libmwaw is a library for import of old Mac documents. It supports many kinds of text documents, spreadsheets, databases, vector and bitmap images. Supported are, for example, documents created by BeagleWorks, ClarisWorks, MacPaint, MacWrite or Microsoft Word for Mac. A full list of supported...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...