CVE-2017-2785

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has...

CVE-2017-2786

CVE-2017-2786 affects Pharos PopUp Printer Client 9.0, specifically the psnotifyd component. The vulnerability stems from DecodeString/CheckPacketEnd handling of attacker-controlled packet data, where an end_of_str pointer is not validated, leading to an out-of-bounds read and a denial of service...

CVE-2017-2788

Pharos PopUp Printer Client 9.0 is affected in its psnotifyd component. The DecodeBinary path processes attacker-controlled data from network packets, leading to a heap-based buffer overflow. In a sequence, data from the packet is XOR-deobfuscated via a loop and written to attacker-controlled mem...

CVE-2017-2787

Pharos PopUp Printer Client 9.0 (psnotifyd) is affected by CVE-2017-2787 due to a heap-based buffer overflow in BlobData handling. The TALOS/seebug details reveal a vulnerability in psnotifyd where packet data length is decremented and used in a memcpy without adequate validation, enabling an out...

CVE-2017-2785

Summary: CVE-2017-2785 involves a heap-based buffer overflow in the Pharos PopUp Printer Client 9.0 (psnotifyd). The DecodeString logic processes attacker-controlled packet data, enabling a crafted input to overflow a heap buffer and potentially execute code remotely. The vulnerable component is ...

CVE-2017-2786

A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service...

PT-2017-15535 · Pharos · Pharos Popup Printer Client

Name of the Vulnerable Software and Affected Versions: Pharos PopUp printer client version 9.0 Description: A denial of service issue exists in the psnotifyd application. It can be triggered by a specially crafted packet sent to the victim's computer, leading to an out of bounds read, which cause...

Pharos PopUp Printer Client DecodeString Code Execution Vulnerability

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim’s computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...

Pharos PopUp Printer Client DecodeString Code Execution Vulnerability

Summary A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim’s computer and can lead to an out of bounds read causing a crash and a denial of service. Tested Versions Pharos PopUp...

Pharos PopUp Printer Client DecodeBinary Code Execution Vulnerability

Summary An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim’s computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always...

Pharos PopUp Printer Client memcpy Code Execution Vulnerability

Summary A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim’s computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening...

UBUNTU-CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

Wordpress Popup By Supsystic plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in the Wordpress Popup By Supsystic plugin. Attackers can tric...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This...

WordPress Popup by Supsystic 1.7.6 Plugin - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This vulnerablity allow...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

!-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This vulnerablity allows attackers to add and modify scripting code that will...

DEBIAN-CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371

CVE-2017-2371 affects WebKit/WebKitGTK+ (WebKitGTK+ before 2.14.4) with an issue in blocking popup handling. Arch Linux lists CVE-2017-2371 among webkit2gtk vulnerabilities and notes remote code execution/impact vectors via malicious web content; the advisory fixes by upgrading webkit2gtk to 2.14...

Slack: Stealing xoxs-tokens using weak postMessage / call-popup redirect to current team domain

@fransrosen discovered a vulnerability which would allow an attacker running a malicious site to steal XOXS tokens. We resolved the postMessage and call-popup redirect issues, and performed a thorough investigation to confirm that this had never been exploited. Thanks @fransrosen for an interesti...

UBUNTU-CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...