Lucene search
+L

17422 matches found

Rapid7 Blog
Rapid7 Blog
•added 2023/12/29 3:52 p.m.•20 views

Velociraptor 0.7.1 Release

Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...

6.5AI score
SaveExploits0
hivepro
hivepro
•added 2023/12/28 2:23 p.m.•104 views

Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies

Summary: The threat actor Cloud Atlas has been identified in spear-phishing attacks targeting Russian enterprises. The modus operandi involves a phishing message in the initial stage, containing a lure document that exploits CVE-2017-11882, a memory corruption vulnerability in Microsoft Offices...

9.3CVSS7.7AI score0.99945EPSS
SaveExploits33
BDU FSTEC
BDU FSTEC
•added 2023/12/25 12:00 a.m.•14 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/12/25 12:00 a.m.•11 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/12/25 12:00 a.m.•14 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of digital PDF signatures. Exploiting this vulnerability...

7.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/12/25 12:00 a.m.•11 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of digital PDF signatures. Exploiting this vulnerability...

7.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3Affected Software2
Patchstack
Patchstack
•added 2023/12/21 12:00 a.m.•21 views

WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

Software Welcart e-Commerce Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50847 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 04a7c6fd4f27 Credits Muhammad Daffa Required privilege Editor...

7.6CVSS6.8AI score0.00529EPSS
SaveExploits0References2Affected Software1
ICS
ICS
•added 2023/12/19 7:00 a.m.•43 views

Subnet Solutions Inc. PowerSYSTEM Center

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker achieving arbitrary...

7.8CVSS8.4AI score0.00174EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2023/12/18 12:00 a.m.•12 views

Fedora: Security Advisory for seamonkey (FEDORA-2023-deb5cf6515)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/12/18 12:00 a.m.•36 views

Fedora: Security Advisory (FEDORA-2023-3fbd936b15)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.00544EPSS
SaveExploits2References6
Fedora
Fedora
•added 2023/12/17 1:44 a.m.•60 views

[SECURITY] Fedora 38 Update: vim-9.0.2167-1.fc38

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

5.5CVSS5.6AI score0.00544EPSS
SaveExploits2
Fedora
Fedora
•added 2023/12/17 1:44 a.m.•15 views

[SECURITY] Fedora 38 Update: seamonkey-2.53.18-1.fc38

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

7.1AI score
SaveExploits0
Fedora
Fedora
•added 2023/12/17 1:36 a.m.•50 views

[SECURITY] Fedora 39 Update: vim-9.0.2167-1.fc39

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

5.5CVSS5.6AI score0.00544EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2023/12/16 12:00 a.m.•33 views

Fedora 38 : vim (2023-ca6c3651fe)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ca6c3651fe advisory. The newest upstream commit Security fixes for CVE-2023-48706, CVE-2023-46246 Tenable has extracted the preceding description block directly from the...

5.5CVSS6.5AI score0.00544EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/12/15 12:00 a.m.•31 views

XWiki Platform Security Vulnerability

XWiki Platform is the XWiki Foundation's suite of wiki platforms for creating collaborative web applications. A security vulnerability exists in XWiki Platform that stems from the fact that in the administration interface, anyone who can edit any wiki page in an XWiki installation can gain...

9.9CVSS7.1AI score0.01188EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2023/12/15 12:00 a.m.•53 views

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-447)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-447 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to b...

4.3CVSS6.4AI score0.00755EPSS
SaveExploits0References16
Amazon
Amazon
•added 2023/12/14 12:00 a.m.•7 views

Low: vim

Issue Overview: Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in...

4.3CVSS6.8AI score0.00755EPSS
SaveExploits0
Fedora
Fedora
•added 2023/12/13 1:34 a.m.•57 views

[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38

LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

8.8CVSS8.8AI score0.01017EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2023/12/12 12:00 a.m.•20 views

Fedora: Security Advisory (FEDORA-2023-76db6c040e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2023/12/11 9:15 p.m.•16 views

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

6.1CVSS5.5AI score0.01147EPSS
SaveExploits1References2
Rows per page
Query Builder