WordPress Gtranslate Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Gtranslate versions prior to 2.8.52, which stems from...

[SECURITY] Fedora 31 Update: libssh-0.9.4-2.fc31

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

NETGEAR D3600, D6000 and XR500 OS Command Injection Vulnerability (CNVD-2020-27260)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR XR500 is a wireless router.NETGEAR XR500 is a wireless router. An operating system command injection vulnerability exists in the NETGEAR D3600 prior to version...

tigervnc: Stack buffer overflow in CMsgReader::readSetCursor

TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability occurs due to insufficient sanitization of PixelFormat. Since remote attacker can choose offset from start of the buffer to start writing his values...

tigervnc: Heap buffer overflow in TightDecoder::FilterGradient

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity...

MS09-034: Cumulative security update for Internet Explorer

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted Web page by using Internet Explorer. Accounts that are configured to have fewer user rights could be affected less.The update that this article describes has been replaced by a...

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

This is a PoC exploit for CVE-2020-3952, a vulnerability in VMwa...

The vulnerability of the VNC client of the remote desktop management software UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the VNC client of the remote desktop management software UltraVNC is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2020-24063)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows Adobe Font Manager...

Microsoft Windows Graphics Device Interface Remote Code Execution Vulnerability (CNVD-2020-34941)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. A remote co...

PHP mb_strtolower Stack Buffer Overflow (CVE-2020-7065)

A stack buffer overflow vulnerability exists in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ThinkPHP - Multiple PHP Injection RCEs (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ThinkPHP Multiple PHP Injection RCEs', 'Description' = %q This module exploits one of two PHP injection vulnerabilities in the ThinkPHP web...

Foxit Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

CVE-2020-11790

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers...

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

Code injection

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...

CVE-2020-10383

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...

CVE-2020-10382

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...

CVE-2020-5739

Affected product: Grandstream GXP1600 series firmware

PT-2020-12053 · Mb · Mbconnect24

Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions prior to 2.5.0 mymbCONNECT24 versions prior to 2.5.0 Description: An issue was discovered in the mbCONNECT24 and mymbCONNECT24 software, allowing for unauthenticated remote code execution in the com mb24sysapi module...