CVE-2018-12528

CVE-2018-12528 affects Intex N150 devices. The vulnerability arises in the backup/restore import flow, which does not validate the file extension of the configuration backup, enabling a crafted file to corrupt router firmware settings or be uploaded as malicious content. An attacker could upload ...

Intex Router N-150 - Arbitrary File Upload

Exploit Title: Intex Router N-150 - Arbitrary File Upload Date: 2018-06-23 Exploit Author: Samrat Das Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious files to be uploaded without any checking of extensions and allows filed to be uploaded. 2. Proof o...

Intex Router N-150 Arbitrary File Upload

Exploit Title:aa Intex Router N-150 - Arbitrary File Upload Date: 2018-06-23 Exploit Author: Samrat Das Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious files to be uploaded without any checking of extensions and allows filed to be uploaded. 2. Proof...

Security Bulletin: IBM Tivoli Netcool Service Quality Manager is affected by an Open Source Apache POI vulnerability (CVE-2017-12626)

Summary IBM Tivoli Netcool Service Quality Manager TNSQM is affected by an Open Source Apache POI vulnerability. Vulnerability Details CVEID: CVE-2017-12626 DESCRIPTION: Apache POI is vulnerable to a denial of service, caused by an error while parsing malicious WMF, EMF, MSG and macros and...

Security Bulletin: Multiple Security Vulnerabilities affect IBM Security Privileged Identity Manager Virtual Appliance

Summary There are multiple security vulnerabilities in various components fixed in the IBM Security Privileged Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive...

CVE-2017-5427

A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-11857)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds read vulnerability exists in the U3D Texture Resource framework handling in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The vulnerability can b...

CVE-2018-9975

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Security Update for Microsoft Excel 2016 (KB4018382) 64-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Easy File Sharing Web Server Unrestricted File Upload Vulnerability

Easy File Sharing Web Server is a file sharing WEB service program. An unrestricted file upload vulnerability exists in Easy File Sharing Web Server. An attacker can exploit this vulnerability to upload unauthorized malicious files...

MSTAR Set-Top BOX Command Injection Vulnerability

Exploit for hardware platform in category local exploits While I was working on diagnostic device for some of my clients I found command injections in MSTAR Set-Top box products. Diagnostic device is not specialy target this vendor but we used it in development phase and for testing. Vulnerable...

CVE-2018-10583

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt...

Symantec Advanced Secure Gateway and ProxySG Arbitrary File Upload Vulnerability

Symantec Advanced Secure Gateway ASG and ProxySG are both security gateway appliances from Symantec USA. An arbitrary file upload vulnerability exists in Symantec ASG and ProxySG management consoles. An attacker could exploit this vulnerability to upload arbitrary malicious files to the managemen...

Denial Of Service (DoS) Through Null Pointer Access

libarchive.so is susceptible to Denial of Service DoS through null pointer access. The vulnerability is possible when the header is a split file in multivolume RAR, it does not properly check the file name and flag for multivolume, allowing the attacker to parse malicious .rar files...

Roblox: Subdomain Takeover to Authentication bypass

Vulnerability Type: ----------- Subdomain Takeover Description: ----------- Due to unclaimed or expired Hubspot instance an attacker is able to claim and serve content from devrel.roblox.com and perform different kind of attacks which i shared in impact section. Affected Area: -----------...

Magento cross-site scripting vulnerability (CNVD-2018-04516)

Magento is an open source PHP e-commerce system from Magento, which provides permission management, search engine and payment gateway. Magento cross-site scripting vulnerability, attackers by enticing users to access malicious files to exploit the vulnerability to inject malicious JavaScript scri...

‘Olympic Destroyer’ Malware Behind Winter Olympics Cyberattack, Researchers Say

Winter Olympics officials have confirmed that a cyberattack occurred during the games’ opening ceremony on Feb. 9, but are remaining mum on the source of the attack. Researchers say the attack employed malware, dubbed Olympic Destroyer, that was written with the sole intention of destroying...

The vulnerability of the tickets.php script in the osTicket customer support system, which allows a perpetrator to upload malicious files.

The vulnerability of the tickets.php script in the osTicket customer support system is related to an incorrect mechanism for checking file content during loading. Exploiting this vulnerability allows a malicious actor to upload malicious files remotely...

IC3 Warns of Impersonation Scams

The Internet Crime Complaint Center IC3 has released an alert on impersonation scams. In these schemes, scammers send emails impersonating IC3 to trick recipients into providing personally identifiable information or downloading malicious files. Users should use caution when reviewing unsolicited...

New Dridex Variant Emerges With An FTP Twist

A variant of the Dridex banking trojan recently popped up in an email campaign, with an unusual twist: The attackers used compromised FTP sites for hosting malicious documents, according to researchers at Forcepoint. It was a notable departure from the norm of using HTTP links and could represent...