PT-2024-8683 · Unknown · Spidercontrol Scada Web Server

Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Web Server affected versions not specified Description: The issue is related to the upload of specially crafted malicious files without authentication, which could allow an attacker to execute arbitrary code. The...

PT-2024-6186 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 23.6.6, 24.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability in Adobe After Effects, which could result in arbitrary code execution in the context of the current user...

PT-2024-6229 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.6, 27.9.5 and earlier Description: The issue is related to an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-6231 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.5, 23.6.8 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su...

PT-2024-6187 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 23.6.6, 24.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

Adobe Premiere Pro AVI File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-6350 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current...

iniNet Solutions SpiderControl SCADA Web Server 代码问题漏洞

iniNet Solutions SpiderControl SCADA Web Server is a server from iniNet Solutions. A code issue vulnerability exists in iniNet Solutions SpiderControl SCADA Web Server. An attacker could exploit the vulnerability to upload specially crafted malicious files...

PT-2024-6347 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Desktop versions 24.7.4, 25.11 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2024-6230 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.6, 27.9.5 and earlier Description: The issue is related to an integer underflow vulnerability. Exploitation of this issue could result in arbitrary code execution in the context of the current user. This requires...

PT-2024-6232 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.5, 23.6.8 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir...

CVE-2024-45107

Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

CVE-2024-45107 ZDI-CAN-24186: Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability

Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

Mac OS X Safari file:// Redirection Sandbox Escape

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Safari file:// Redirection Sandbox Escape', 'Description' = %q Versions of Safari before 8.0.6, 7.1.6, and 6.2.6 are vulnerable to a...

LibreOffice 6.03 /Apache OpenOffice 4.1.5 Malicious ODT File Generator

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' require 'rex/zip' class MetasploitModule 'LibreOffice 6.03 /Apache OpenOffice 4.1.5 Malicious ODT File Generator', 'Description' = 'Generates a Maliciou...

Arbitrary Code Execution

JupyterLab is vulnerable to Arbitrary Code Execution. The vulnerability is due to user interaction with a malicious notebook or Markdown file using JupyterLab's preview feature, which allows execution of arbitrary code and unauthorized data access...

Mattermost File Upload Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a file upload vulnerability that stems from the application's lack of effective validation of uploaded files. An attacker can exploit this vulnerability to upload malicious file...

CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

The vulnerability of the AcroForms processor in the PDF viewer software from Foxit Reader (formerly Foxit Reader) allows a perpetrator to execute arbitrary code.

The vulnerability of the AcroForms processor in the PDF electronic document viewing software Foxit PDF Reader formerly Foxit Reader relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the use...

CVE-2024-41879

Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...