ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.grakn:grakn (>=0.17.0 <=0.18.0) +13217 more potentially affected by CVE-2017-7525 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.8.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2017-7525 Source advisory: OSV:GHSA-QXXX-2PP7-5HMX...

app.myoss.wechat:wechat-starter-core (=1.1.0.RELEASE), app.myoss.wechat:wechat-starter-mini-app (=1.1.0.RELEASE) +87 more potentially affected by CVE-2018-1000632 via org.dom4j:dom4j (>=2.0.0-RC1 <=2.0.2)

org.dom4j:dom4j MAVEN version =2.0.0-RC1, =3.0.0, =0.0.5, =0.0.5, =0.0.5, =1.0.RELEASE, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.8 and more Source cves: CVE-2018-1000632 Source advisory: OSV:GHSA-6PCC-3RFX-4GPM...

LocalTapiola: Reflected XSS of bbe-child-starter Theme via "value"-GET-parameter

This bug is related to 324442. And xss in other url. poc: https://www.lahitapiolarahoitus.fi/wp-content/themes/bbe-child-starter/bbe-engine/assets/actions/bbeopenhtmleditorpopup.php?attribute=%27%3C/script%3E%3Cbody%20onload&value=alertdocument.cookie Impact -Make admin-user run malicious...

Joomla Acymailing Starter 5.9.5 Component - CSV Macro Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Acymailing Starter 5.9.5 CSV Macro Injection Exploit Author: Sureshbabu Narvaneni Vendor Homepage: https://www.acyba.com Software Link: https://extensions.joomla.org/extension/acymailing-starter/ Affected...

Siemens Industrial Products (Update D)

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Industrial products Vulnerability: Improper Input Validation UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01C Siemens Industrial Products that w...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Microsoft Excel Starter 2010 XML External Entity Injection Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems.Microsoft Excel Starter is the Microsoft Excel Starter. Microsoft Excel Starter 2010 suffe...

Microsoft Excel Starter 2010 XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel Starter 2010 EXCELC.EXE / "OFFICEVIRT.EXE" This is a bundled Excel "starter" version that comes 'pre-loaded'...

Microsoft Excel Starter 2010 XXE Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-STARTER-XXE-REMOTE-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel...

Microsoft Excel Starter 2010 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-STARTER-XXE-REMOTE-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel...

CVE-2016-5814

CVE-2016-5814 is a classic buffer overflow in Rockwell RSLogix products (Micro Starter Lite/Dveloper; RSLogix 500 Starter/Standard/Professional) triggered by parsing malicious RSS project files. The vulnerability is a CWE-120 flaw that allows code execution when a local user opens a crafted RSS f...

Rockwell Automation RSLogix Micro Starter Lite Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Rockwell Automation RSLogix Micro Starter Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Windows x86 - Bind Shell TCP Shellcode

Windows x86 - Bind Shell TCP Shellcode. Shellcode exploit for Winx86 platform / Title : Windows x86 bind shell tcp shellcode Author : Roziul Hasan Khan Shifat Date : 08-09-2016 Tested On : Windows 7 Ultimate , Starter x86 / //Note: This shellcode will only works on x86 / section .text global star...

Windows/x86 - Bind Shell TCP 4444 Shellcode (357 Bytes)

/ Title : Windows x86 bind shell tcp shellcode Author : Roziul Hasan Khan Shifat Date : 08-09-2016 Tested On : Windows 7 Ultimate , Starter x86 / //Note: This shellcode will only works on x86 / section .text global start start: xor ecx,ecx mov eax,fs:ecx+0x30 ;PEB mov eax,eax+0xc ;PEB.Ldr mov...

Windows/x86 - localhost Port Scanner Shellcode (556 bytes)

/ Title : Windows x86 localhost port scanner shellcode Date : 29-07-2016 Author : Roziul Hasan Khan Shifat Tested on : Windows 7 x86 starter / / Disassembly of section .text: 00000000 : 0: 31 db xor %ebx,%ebx 2: 64 8b 43 30 mov %fs:0x30%ebx,%eax 6: 8b 40 0c mov 0xc%eax,%eax 9: 8b 70 14 mov...

Starter Pack App - Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Starter Pack App - Free published at the 'play' market has multiple vulnerabilities...

Starter Kit - BSD license, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Starter Kit published at the 'play' market has multiple vulnerabilities...

March 8, 2016, update for Visio 2016 (KB3114844)

None None...

IBM WebSphere Commerce Open Redirection Vulnerability

IBM WebSphere Commerce is a suite of e-commerce solutions. The solution supports all sales business models, including B2C, B2B, and B2B2C, on a single customer interaction platform.Aurora starter store is one of the page layout tools. An open redirection vulnerability exists in the Aurora starter...

Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-064-02 Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths that was published March 5, 2015, on the NCCIC/ICS‑CERT web site. Ivan Sanchez from...