CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The CVE-2019-17399 entry concerns the Shack Forms Pro extension for Joomla! (pre-4.0.32). The connected sources confirm a path traversal vulnerability triggered by a file attachment, affecting Joomla! installations using Shack Forms Pro before 4.0.32. The core issue is a file-path traversal flaw ...

Joomla JS Support Ticket Component (com_jssupportticket) 1.1.5 - Arbitrary File Download Vulnerabili

Exploit for php platform in category web applications Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link:...

poppler: NULL pointer dereference in _poppler_attachment_new

Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment...

CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

Cross site scripting

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

Unable to attach from Citrix Files/Quick Edit into Secure Mail

Facing an issue where you open a number of different file types in Citrix Files/Quick Edit and select "Open In" and select "Copy to Secure Mail" and you receive a "Unable to attach file" error in Secure Mail...

SUSE-SU-2019:0338-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 60.5 fixes the following issues: Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 bsc1122983 bsc1119105: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2016-5824 Do...

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558...

Microsoft Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

CVE-2018-19149

Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment...

Contact Form 7 <= 5.0.3 - register_post_type() Privilege Escalation

According to the official release: "A privilege escalation vulnerability has been found in Contact Form 7 5.0.3 and older versions. Utilizing this vulnerability, a logged-in user in the Contributor role can potentially edit contact forms, which only Administrator and Editor-role users are allowed...

Threat Outbreak Alert RuleID32883: Email Messages Distributing Malicious Software on June 21, 2018

Medium Alert ID: 58248 First Published: 2018 June 21 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32883 may contain the following files: Name | Siz...

Directory Traversal

FileDownloader is vulnerable to directory traversal. Failing to check filename in util/FileDownloadUtils.java allows the attacker to trigger the attack by sending a file attachment's name with ../...

GD bbPress 2.5 Cross Site Scripting

An authenticated user of a bbPress forum, who can attach a file, can inject arbitrary javascript code via filename. The arbitrary code runs both on the topic page and in the admin panel, and it only affects the administrators, moderators and the attacker. The variable $errorafilea in...

Foxit Reader FileAttachment annotation object style attribute remote code execution vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the style attribute of the FileAttachment annotation object in Foxit Reader version 8.3.1.21155, where the program fails to validate the existence of an object before...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to cause service interruptions or execute arbitrary codes.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure memory corruption by using a specially...