XMind has a dll hijacking vulnerability

XMind is a mind mapping software developed by Shenzhen Ice Software Technology Co., Ltd. and millions of users around the world are using XMind. XMind has a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute malicious code...

Tencent game platform Wegame has dll hijacking vulnerability

Tencent wegame platform is an upgraded version of Tencent Game Platform TGP. Tencent wegame platform provides users with the best quality game services, supports domestic games, and also cooperates with foreign game makers to provide, including information, purchase, download, assistant, live...

Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload

===========Security Intelligence============ Vendor Homepage: adobe.com Version: 2018 Tested on: Adobe ColdFusion 2018 Exploit Author: Pankaj Kumar Thakur Nepal ==========Table of Contents============== Overview Detailed description Thanks & Acknowledgements References ==========Vulnerability...

Updated firefox packages fix security vulnerabilities

The updated packages fix several bugs and some security issues: Sandbox escape through Firefox Sync. CVE-2019-9812 Stored passwords in 'Saved Logins' can be copied without master password entry. CVE-2019-11733 Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1. CVE-2019-11735 File...

cad quick draw suffers from dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad quick draw. An attacker can use this vulnerability to load malicious dll and execute...

cad mini drawing suffers from dll hijacking vulnerability (CNVD-2019-33724)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini drawing CNVD-C-2019-128647. An attacker can exploit the vulnerability to load a...

FreeBSD : mozilla -- multiple vulnerabilities (05463e0a-abd3-4fa4-bd5f-cd5ed132d4c6)

Mozilla Foundation reports : CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: Use-after-free while manipulating video CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML CVE-2019-11742: Same-origin policy violation with SVG...

KLA11531 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Multiple out-of-bound read...

CVE-2019-5223

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution...

CVE-2019-5223

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution...

CVE-2019-5223

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution...

UCMS fileedit.php page code injection vulnerability

UCMS is a simple open source content management system. A code injection vulnerability exists in the UCMS fileedit.php page. An attacker can exploit the vulnerability to execute malicious code...

Huawei PC Manager Authorization Issues Vulnerability

Huawei PC Manager is a computer management application from Huawei China. An authorization issue vulnerability exists in Huawei PC Manager version 9.1.3.1, which arises from the driver's interface not adequately validating data from the userland. An attacker could exploit the vulnerability to...

KLA11519 Multiple vulnerabilities in LibreOffice

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An improper script handling issue can be exploited remotely via a specially crafted file t...

X (Formerly Twitter): Stored XSS in https://app.mopub.com

Vulnerable URL https://app.mopub.com/reports/custom/ XSS Payload: " Parameter nrnew-interval Steps To Reproduce: 1. Login with your credentials. 2. Go to URL: https://app.mopub.com/reports/custom/ 3. Click on New Network Report = Create a new network performance report. 4. Start Burp suite proxy...

schneider Vijeo Designer suffers from dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A dll hijacking vulnerability exists in schneider Vijeo Designer. An attacker can exploit this vulnerability to load a malicious dll and execute...

DLL Hijacking Vulnerability in INVT PanelSim

Shenzhen Inventec Electric Co., Ltd. is specializing in industrial automation and energy and power fields. A DLL hijacking vulnerability exists in INVT PanelSim when processing pl3 project files. An attacker can exploit the vulnerability to load a malicious DLL and execute malicious code...

Kinco KINCOHUIXINPLUGIN suffers from dll hijacking vulnerability

Shanghai BUCO Automation Co., Ltd. is a private high-tech enterprise engaged in the research, development and production of automation products. Kinco KINCOHUIXINPLUGIN suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Hopscotch MagicWorks HMI wintab32 suffers from dll hijacking vulnerability

Shenzhen Hexin Automation Technology Co., Ltd. is a company that mainly deals with items such as PLC, HMI, servo, special control system, remote I/O and field network products. Hopsin MagicWorks HMI wintab32 has a dll hijacking vulnerability that can be exploited by attackers to execute malicious...

Memory Corruption Vulnerability in Kovac HMIStudio hs Project File

Huangshi Kewei Automatic Control Co., Ltd. is a company mainly engaged in microelectronic products, automation instrumentation development and application and related engineering supporting services and other projects. A memory corruption vulnerability exists in the Kewe HMIStudio hs project file...