CVE-2016-5990

CVE-2016-5990 affects IBM Security Privileged Identity Manager Virtual Appliance (ISPIM) and is triggered by an authenticated user uploading malicious files that are then executed by the server. Affected versions listed in the IBM advisory include ISPIM 2.0.2 and 2.1. The root cause is not exhaus...

CVE-2016-5990

IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server...

Web Servers Malicious Upload Directory Traversal (CVE-2022-29596)

A directory traversal vulnerability exists in web servers. The vulnerability allows unauthorized users to upload malicious files to the server. A remote attacker can exploit this vulnerability by uploading an arbitrary, executable file and executing it under the context of SYSTEM...

MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014

MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014 Introduction This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote code...

DoraCMS File Upload Vulnerability

DoraCMS is based on Nodejs + express + mongodb written a content management system . A file upload vulnerability exists in several pages of DoraCMS, which can be exploited by an attacker to upload malicious files to the server and gain server privileges...

BSA-2017-178

Security Advisory ID : BSA-2017-178 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability inDashboardFileReceiveServletin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload malicious file in a section of the file...

Apport Command Execution Vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in versio...

U.S. Dept Of Defense: Unrestricted File Upload

A Navy system had a file upload tool accessible from the Internet. This would have permitted an attacker to upload malicious files and potentially execute code on the server. Thanks to @hogarth45 for reporting it...

Brave Software: links the user may download can be a malicious files

Hi, Summary: This vulnerability is pretty simple and pretty dangerous at the same time Almost any link the user tries to download it's extension is set according to the file extension in the path if the path is / then it download's it according to the domain name Eg: 1...

ImageMagick memory corruption vulnerability (CNVD-2016-10309)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. ImageMagick function AcquireMagickMemory memory corruption vulnerability can be exploited by remote attackers to build...

ImageMagick Memory Corruption Vulnerability

ImageMagick is a set of open source image processing software. A memory corruption vulnerability exists in ImageMagick that can be exploited by remote attackers to construct malicious files that can be parsed by the user to crash the application or execute arbitrary code...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08948)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09452)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-08953 )

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit the vulnerabilit...

Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads

WordPress theme publisher DynamicPress fixed a flaw Monday that let anyone upload malicious files to sites running its business-themed Neosense WordPress templates, compromise the site and possibly the server hosting it. Walter Hop, security researcher with Netherlands-based company, Slik, made t...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-07684)

Microsoft Office is an office software suite product developed by Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. Microsoft Office processing office files fails to properly handle objects in memory, allowing remote attackers to exploit the vulnerabili...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-07575)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. Microsoft Visio Handling Malicious Files fails to properly handle objects in memory, allowing remote...

LeapFTP Buffer Overflow Vulnerability

LeapFTP is a powerful FTP tool. Similar to Netscape bookmark form, more convenient to connect. Download and upload files continuously. You can download or upload a whole directory, or delete a whole directory directly. It allows you to organize the order of downloading or uploading files in...

WordPress Mobile Detector plug-in vulnerability had been used to attack-vulnerability warning-the black bar safety net

! Update:WordPress Mobile Detector plugin have been patched,the vulnerability has been resolved. Please update as soon as possible,a patched version is 3. 6,the latest version is 3. 7 in. In the past few days,we have noticed the problem sites number linear growth,and did not find these sites the...

Suspicious Link Redirection JavaScript Phishing Attempt

Several phishing campaigns use embedded redirection links in order to lure the victim user to download malicious files. Successful exploitation could result in arbitrary code running on the victim machine when the malicious file is opened...