apache-poi: denial of service in HSLFSlideShow via corrupted PPT file

A denial of service flaw was found in the way the HSLFSlideShow class implementation in Apache POI handled certain PPT files. A remote attacker could submit a specially crafted PPT file that would cause Apache POI to hang indefinitely...

Roll the Ball™ - slide puzzle - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Roll the Ball™ - slide puzzle published at the 'play' market has multiple vulnerabilities...

Slide Puzzle Kids - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Slide Puzzle Kids published at the 'play' market has multiple vulnerabilities...

Kids Slide Puzzle World - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kids Slide Puzzle World published at the 'play' market has multiple vulnerabilities...

Kids Dinosaur Rex Slide Puzzle - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kids Dinosaur Rex Slide Puzzle published at the 'play' market has multiple vulnerabilities...

SLIDE PUZZLE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SLIDE PUZZLE published at the 'play' market has multiple vulnerabilities...

Mini Video Maker - Slide Show - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mini Video Maker - Slide Show published at the 'play' market has multiple vulnerabilities...

IORegistryIterator race condition vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Author: shrekwzw@360NirvanTeam 0x00 description CVE-2 0 1 5-7 0 8 4 is due to the IORegistryIterator the user does not consider the state of multiple threads simultaneously call the case, causing a Race Condition that can lead to arbitrary code execution. Vulnerability exists in MAP version 3 2 4...

March 8, 2016, update for PowerPoint 2016 (KB3114847)

None None...

Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20150722)

A flaw was found in the way the LibreOffice HWP Hangul Word Processor file filter processed certain HWP documents. An attacker able to trick a user into opening a specially crafted HWP document could possibly use this flaw to execute arbitrary code with the privileges of the user opening that...

Moderate: Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update

Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...

WordPress Content Slide plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Content Slide is one of the plugin used to create a fully customizable jquery Fading image slideshow . A...

WordPress Content Slide Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Content Slide is one of the plugin used to create a fully customizable jquery Fading image slideshow . An HTML...

WordPress Content Slide 1.4.2 CSRF / Cross Site Scripting

Details ================ Software: Wordpress Content Slide Version: 1.4.2 Homepage: http://wordpress.org/plugins/content-slide/ Advisory report: https://security.dxw.com/advisories/csrf-and-stored-xss-in-wordpress-content-slide-allow-an-attacker-to-have-full-admin-privileges/ CVE: Awaiting...

WordPress slideshow plugin RevSlider exploit-vulnerability warning-the black bar safety net

Any read: /wp-admin/admin-ajax. php? action=revslidershowimage&img=../wp-config.php Any upload: !/ usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 5 October 2 0 1 4 Coded: 1 5 October 2 0 1 4 Updated: 2 5...

Content Slide <= 1.4.2 - CSRF & Stored XSS

The content-slide WordPress plugin was affected by a CSRF & Stored XSS security vulnerability...

WordPress Cross Slide 2.0.5 Cross Site Request Forgery / Cross Site Scripting

Title: WordPress 'Cross Slide' plugin - XSS/CSRF Version: 2.0.5 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/crossslide-jquery-plugin-for-wordpress/ Contacted WordPress: 2015/01/26...

DIZzy-1.12-Local

Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x shellcode = "\xB8\xFF\xEF\xFF\xFF\xF7\xD0\x2B\xE0\x55\x8B\xEC" + "\x33\xFF\x57\x83\xEC\x04\xC6\x45\xF8\x63\xC6\x45" + "\xF9\x6D\xC6\x45\xFA\x64\xC6\x45\xFB\x2E\xC6\x45" +...

Apache POI Denial of Service Vulnerability

Apache POI is a free and open source cross-platform Java API written in Java . A denial of service vulnerability in HSLFSlideShow in Apache POI versions prior to 3.11 allows remote attackers to cause a denial of service infinite loop and deadlock by crafting a PPT file...