Stack Overflow Vulnerability in WPS

WPS is an office software developed by Kingsoft Office Software. A stack overflow vulnerability exists in WPS text. The vulnerability is due to the program failing to validate the buffer length. An attacker can exploit the vulnerability by constructing a malformed XML file resulting in heap...

Heap overflow vulnerability exists in WPS (CNVD-2017-19997)

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS. The vulnerability stems from the program's failure to validate the buffer length, which can be exploited by an attacker to cause heap corruption or execute arbitrary code by constructing ...

Memory out-of-bounds write vulnerability in WPS Text WordConvertDll module

WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds write vulnerability exists in the WPS text WordConvertDll module. The vulnerability is caused due to the program failing to validate the buffer length when the user uses the Traditional and Simplified Conversi...

Arbitrary Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. An arbitrary password reset vulnerability exists in Kingsoft wordmaster android app. Due to a design flaw in the feature of changing cell phone number, an attacker can reset the password of another person by only...

Arbitrary User Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a free translation and learning software from Kingsoft. Kingsoft wordmaster android app there is any user password reset vulnerability, the vulnerability arises from the change of password did not increase the verification of the old password due to the attacker can take...

WPS has 8 out-of-bounds access vulnerabilities

WPS Office is a set of office software developed by Beijing Kingsoft Office Software Company. A memory out-of-bounds access vulnerability exists in the kso and docreader modules of WPS Text. The vulnerability stems from insufficient checking for length out-of-bounds, and is caused by direct calls...

Kingsoft PDF has a Denial of Service Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF there is a denial of service vulnerability. Due to the existence of a jp2000 jpx format image in the file, jpx exists in the image color space sycc422 or sycc420 converted to rgb there are abnormal data is not processed, which can lead to a program...

Kingsoft PDF Exploit Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF has a release reuse vulnerability. As a result of opening the document, the document business processing block there is a business object reference count, resulting in the document object is not released, resulting in memory leakage to form this...

DLL Hijacking Vulnerability in Kingsoft PPT Beautifier Software

Kingsoft PPT Beautifier is a PPT beautification and creation aid. Kingsoft PPT Beautifier has a DLL hijacking vulnerability, allowing attackers to exploit the vulnerability in the windows2003\windows7 environment, variable relative OFFICE software infection, even if the malicious DLL deleted from...

Command Execution Vulnerability in Kingsoft RealEase Intelligent DNS Management System

Kingsoft RealEase Intelligent DNS Management System is a set of intelligent domain name management system for domain name management enterprises, IDCs and operators. A command execution vulnerability exists in the Kingsoft RealEase Intelligent DNS Management System, which allows attackers to...

Kingsoft General System has ROOT privilege command execution vulnerability

Kingsoft is one of the Internet software companies. Kingsoft General System has a ROOT privilege command execution vulnerability. The vulnerability exists in the file: /src/system/dhcpdialog.php The main code can be seen here: $IGoperation = $POST'IGoperation'; $IGcardname = $POST'IGcard';...

Kingsoft KingGate Firewall suffers from roo privilege command execution vulnerability

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a roo privilege command execution vulnerability. It allows attackers to exploit the vulnerability to gain server privileges...

biz.kingsoft.jp XSS vulnerability

Vulnerable URL: https://biz.kingsoft.jp/wowtalk/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WPS Office .ppt drawingContainer Memory Corruption Vulnerability

Kingsoft WPS Office is an office software suite with popular components such as Writer, Spreadsheets and Presentation. A memory corruption vulnerability exists in Kingsoft WPS Office, which could be exploited by an attacker to construct a malicious file that could be parsed by the user, causing t...

Remote Command Execution Vulnerability in Kingsoft Firewall System

Kingsoft Firewall System is a firewall product. A remote command execution vulnerability exists in Kingsoft Firewall System. The exploit: POST /src/system/post/postnetmanageMultiIp.php, allows attackers to traverse directories, collect sensitive directory and file information and remotely execute...

Cross-site Scripting Vulnerability in WPSMAIL Email Client

WPS Mail is a mail sending and receiving software developed by Kingsoft Group. There is a cross-site scripting vulnerability in the WPSMAIL email client, where js code is added to the content of sent emails, which triggers a cross-site attack when receiving emails...

Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...

Remote Command Execution Vulnerability in the IG_checkbox8 Parameter in the ipmac.php Page of Kingsoft KingGate Firewall

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGcheckbox8 parameter in the ipmac.php page of Kingsoft KingGate Firewall. An attacker is allowed to submit a POST request as: IGoperation=IGdelete&IGcheckbox8=11;ifconfig||x to execute system commands...

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05716)

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in Kingsoft KingGate Firewall. It allows an attacker to remotely execute commands...

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05715)

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a remote command execution vulnerability. Construct URL: https://target/src/application/log/auditmail.php?IGfilename=1|telnet%20public server ip%209527;echo%20&tablename=3333 can execute system commands on public network The...