VBScript - rtFilter Out-of-Bounds Read

VBScript - rtFilter Out-of-Bounds Read On Error Resume Next Class class1 Public Default Property Get x ReDim arr1 End Property End Class set c = new class1 arr = Array"b", "b", "a", "a", c Call Filterarr, "a" !-- ===============================================================================...

Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-Free

vbscript: use-after-free in OLEAUT32!VariantClear and scrrun!VBADictionary::putItem CVE-2018-8544 There is a use-after-free vulnerability possibly two vulnerabilities triggerable by the same PoC, see below in Microsoft VBScript. The vulnerability has been confirmed in Internet Explorer on Windows...

TerraMaster TOS Directory Traversal Vulnerability

TerraMaster TOS is a set of Linux-based storage server operating system developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization, etc. The explorer application is one of the file browsing applications. A directory traversal...

CVE-2018-13332

Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows attackers to upload files to arbitrary locations via the "path" URL parameter...

Directory traversal

Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows attackers to upload files to arbitrary locations via the "path" URL parameter...

November 27, 2018—KB4467681 (OS Build 16299.820)

None None...

Question mark in Veeam Explorer for Microsoft SQL Server meaning

Challenge In Veeam Explorer for SQL, some databases may be listed with a question mark. Despite the question mark and warning, some restore operations may still function. However, some restore details may not auto-populate due to the lack of metadata. Cause The question mark indicates that metada...

Design/Logic Flaw

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

CVE-2018-19421

CVE-2018-19421 affects GetSimpleCMS 3.3.15. The vulnerability arises in the upload handling: admin/upload-uploadify.php and the validation routine in admin/inc/security_functions.php interact with admin/upload.php, which blocks .html uploads but allows Internet Explorer to render HTML elements co...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

Adobe Flash Player Security Update (APSB18-44) - Windows

Adobe Flash Player within Microsoft Edge or Internet Explorer is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS

Adobe released a patch for a critical flaw on Tuesday that leaves its Flash Player vulnerable to arbitrary code execution by an adversary. Affected are versions of the Flash Player running on Windows, macOS, Linux and Chrome OS. In tandem, a Microsoft Security Advisory was also issued for the bug...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-23924)

Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are both operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is a server operating system. Windows Server 2008 R2 SP1 is a server...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-23919)

Microsoft Windows Server 2008 SP2 and others are operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE is one of the default browsers that comes with Windows. An information disclosure vulnerability exists in Microsoft IE 9, 10, and 11. A remote attacker could explo...

CNNVD about Microsoft more security vulnerability Advisory-vulnerability warning-the black bar safety net

Recently, the official Microsoft has released multiple security vulnerabilities in the Bulletin, including Microsoft Internet Explorer security vulnerability, CNNVD-201811-349, CVE-2018-8570, the Microsoft Word security vulnerabilities CNNVD-201811-387, CVE-2018-8539）、（CNNVD-201811-388,...

Patch Tuesday, November 2018 Edition

Microsoft on Tuesday released 16 software updates to fix more than 60 security holes in various flavors of Windows and other Microsoft products. Adobe also has security patches available for Flash Player, Acrobat and Reader users. As per usual, most of the critical flaws -- those that can be...

CVE-2018-8552

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet...

CVE-2018-8570

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11...