Microsoft Office Code Execution

The vulnerability of the Microsoft Office suite is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

Offline Digital Forensics Tool for Binary Files: ByteForce

Offline Digital Forensics Tool for Binary Files Offline Digital Forensics Tool for Binary Files This tool can be used for offline digital forensics and malware analysis as it shows all raw bytes of a file and also the ASCII representations. As you can see from the screenshots, It can be used on a...

Adobe Reader Data Compromise

The vulnerability in Adobe Reader allows attackers to bypass the security mechanisms of PDF documents...

Foxit Reader Compromise Information Disclosure

Cross-site execution of stored scripts in Foxit Reader when reading and displaying file names and their paths in the “Recent Documents” section on the initial page allows attackers to replace registry entries and force the application to download malicious files...

Firefox Code Execution

The Mozilla Firefox browser contains a vulnerability related to the implementation of the cairotruetypeindextoucs4 function in the Cairo class. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely, using a specially crafted extension that processes fonts in PDF...

Mozilla SeaMonkey Code Execution

Mozilla SeaMonkey’s email client contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely, using a specially crafted extension that...

Microsoft Office Code Execution

A vulnerability in Microsoft Office software, related to errors in checking the path of dynamically loaded libraries. Exploiting this vulnerability allows a malicious attacker to execute arbitrary code contained in the dynamic library located in the document’s open directory...

Microsoft Word Code Execution

Microsoft Word’s text editor contains a vulnerability in its file format converter, which occurs when converting documents to binary format. With a specially created .doc file, a malicious individual can cause the application to malfunction or execute arbitrary code...

Word Viewer Information Disclosure

The vulnerability in the Word Viewer, a component of the Microsoft SharePoint Server corporate application suite, as well as the Microsoft Office Web Apps and Microsoft Office Compatibility Pack, affects text editors like Microsoft Word. These vulnerabilities stem from a lack of protection for...

[SECURITY] Fedora 24 Update: xerces-c-3.1.4-1.fc24

Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0...

Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)

The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2016-04412)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in OX AppSuite 7.8.1 and earlier...

PInfo 0.6.9-5.1 Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: An alternative info-file...

PInfo 0.6.9-5.1 - Local Buffer Overflow

Exploit for linux platform in category local exploits Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: An alternative info-file viewer pinfo is an viewer for Info documents, which is based on ncurse...

PInfo 0.6.9-5.1 - Local Buffer Overflow

PInfo 0.6.9-5.1 - Local Buffer Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program...

PInfo 0.6.9-5.1 - Local Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: An alternative info-file...

CVE-2016-0277

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0278, CVE-2016-0279, and CVE-2016-0301...