CVE-2016-3358

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013...

Adobe Digital Editions Remote Code Execution Vulnerability

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07530)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07529)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07527)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

Adobe ColdFusion < 11 Update 10 - XML external entity injection

Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - APSB16-30 - Release date: 31.08.2016 I. VULNERABILITY Adobe ColdFusion = 11 XML External Entity XXE Injection II. BACKGROUND "Adobe ColdFusion 11 Enterprise Edition offers a single platform to rapidly build and...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

Adobe ColdFusion 11 Update 10 - XML External Entity Injection

Adobe ColdFusion 11 Update 10 - XML External Entity Injection ''' ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-4264 - APSB16-30 - Release date: 31.08.2016 - Severity: Critical...

Legal Robot: News Feed Detected

RSS Really Simple Syndication and related formats are methods for publishing regularly updated web content. RSS feeds are XML documents that are made available for client downloads and are often included with content managament systems, such as blogs. https://www.legalrobot.com/rss.xml...

pdf to doc converter handle pdf file memory corruption vulnerability

pdf to doc converter is a PDF conversion software. The software suffers from a memory corruption vulnerability in the handling of PDF files that allows an attacker to crash the program by constructing malformed PDF files...

Hancitor Malware Shifts Infection Strategies

Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest push of the Hancitor family of malware since June that it says has...

The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer are caused by buffer overflow attacks. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially crafted Office document from a remote...

Threat Outbreak Alert RuleID24259: Email Messages Distributing Malicious Software on August 12, 2016

Medium Alert ID: 48465 First Published: 2016 August 12 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24259 may contain the following files: Name |...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06269)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06271)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

SOL48448204 - PHP vulnerability CVE-2016-6207

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

PowerWare Ransomware Masquerades as Locky to Intimidate Victims

A new variant of the PowerWare ransomware is stealing street creds from the Locky strain of ransomware in an attempt to spoof the malware family. A new sample of PowerWare found by Palo Alto Networks’ Unit 42 reveals the ransomware’s quickly evolving tactics. According to researchers, a new versi...

The vulnerability of the libxml2 library allows a attacker to trigger a service failure or read arbitrary files.

The vulnerability of the xmlSAX2ResolveEntity and xmlSetExternalEntityLoader functions in the libxml2 library is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures or read arbitrary files using a specially crafted XML...