Adobe, Microsoft Push Critical Security Fixes

Adobe and Microsoft each released critical fixes for their products today, a.k.a "Patch Tuesday," the second Tuesday of every month. Adobe updated its Flash Player program to resolve a half dozen critical security holes. Microsoft issued updates to correct at least 65 security vulnerabilities in...

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...

Description of the security update for the information disclosure vulnerability in Visual Studio 2015 Update 3: April 10, 2018 (KB4087371)

None None...

Microsoft Visual Studio Information Disclosure Vulnerability

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database PDB files. An attacker who took advantage of this information disclosure could view uninitialized memory from the Visual Studio instance...

Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018

Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...

Description of the security update for the information disclosure vulnerability in Visual Studio 2013 Update 5: April 10, 2018

None None...

Microsoft Visual Studio CVE-2018-1037 Information Disclosure Vulnerability

Description Microsoft Visual Studio is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Visual Studio 2010 SP1 Microsoft Visual Studio 2012 Update 4 Microsoft Visual...

KLA11226 OSI vulnerability in Microsoft Developer Tools

An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2018-1037 Related products Microsoft-Visual-Studio CVE list CVE-2018-1037 warning KB list 4089501 4087371 4091346...

Studio 42 elFinder Directory Traversal Vulnerability

Studio 42 elFinder is an open source Web file manager using jQuery and jQuery UI and written in JavaScript . A directory traversal vulnerability exists in Studio 42 elFinder. An attacker can exploit this vulnerability by deleting files with the 'zipdl' function in the elFinder.class.php file...

Studio 42 elFinder on Windows Arbitrary File Deletion Vulnerability

Studio 42 elFinder on Windows is a Windows-based platform using jQuery and jQuery UI and written in JavaScript open source Web file manager . A security vulnerability exists in the 'zipdl' function of the elFinder.class.php file in versions of Studio 42 elFinder prior to 2.1.37 for Windows-based...

CVE-2018-9110

Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...

CVE-2018-9110

Studio 42 elFinder is vulnerable before version 2.1.37 due to a directory traversal flaw in elFinder.class.php zipdl() that lets an attacker download files accessible to the web server and delete files owned by the server process. The issue stems from an incomplete fix for CVE-2018-9109. Public r...

CVE-2018-9109

Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process...

CVE-2018-9109

Studio 42 elFinder (PHP Web file manager) prior to version 2.1.36 is affected by a directory traversal vulnerability in elFinder.class.php, zipdl() function. The flaw allows a remote attacker to download files accessible by the web server process and to delete files owned by the account running t...

User Profile Management: Default Exclusion List not working. Error: "HDX policy DefaultSyncExclusionListDir disabled. Using an empty list"

If you enable "Enable Default Exclusion List - directories " policy from Citrix Studio, it might not work as expected. Following entry isrecorded in User Profile Management UPM logs: 2018-03-16;19:09:25.611;INFORMATION;;;;1756;ReadPolicy: HDX policy DefaultSyncExclusionListDir disabled. Using an...

Pegasystems Pega Platform Designer Studio Cross-Site Scripting Vulnerability

Pegasystems Pega Platform is a suite of rapid application development platforms from Pegasystems, Inc. Designer Studio is one of the design function modules. A cross-site scripting vulnerability exists in Designer Studio in the Pegasystems Pega Platform. A remote attacker can exploit this...

Solaris 10 (sparc) : 143390-01

Sun Studio 12 Update 1: Patch for IDE. Date this patch was last updated by Sun : May/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 143391-01

Sun Studio 12 Update 1x86 : Patch for IDE. Date this patch was last updated by Sun : May/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

studio-artika.co.il XSS vulnerability

Open Bug Bounty ID: OBB-577971 Description| Value ---|--- Affected Website:| studio-artika.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Run 'Kali Linux' Natively On Windows 10 — Just Like That!

Great news for hackers. Now you can download and install Kali Linux directly from the Microsoft App Store on Windows 10 just like any other application. I know it sounds crazy, but it's true! Kali Linux, a very popular, free, and open-source Linux-based operating system widely used for hacking an...