Oracle Solaris Local Vulnerability (CNVD-2017-00976)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Solaris component of Oracle Solaris version 11.3, which could be exploited by an attacker to compromise the...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-00378)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014

MS14-044: Description of the security update for SQL Server 2014 GDR: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing th...

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 (QFE): August 12, 2014

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 QFE: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2008 R2 Service Pack 2 that could allow an attacker to compromise your system and gain control over it. You can help...

CVE-2016-9565

It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. Mitigation !/bin/bash mv...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2016-12347)

Adobe Experience Manager is a software developed by Adobe that provides marketers and IT with the agility to market online so they can engage new audiences and deliver targeted content. A cross-site scripting vulnerability exists in Adobe Experience Manager, which could be exploited by an attacke...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2016-12346)

Adobe Experience Manager is a software developed by Adobe USA that provides marketers and IT with the agility to market online so they can engage new audiences and deliver targeted content. A cross-site scripting vulnerability exists in Adobe Experience Manager, which can be exploited by an...

Adobe Experience Manager Cross-Site Request Forgery Vulnerability

Adobe Experience Manager is a free image reading and conversion tool from Adobe USA. A cross-site request forgery vulnerability exists in Adobe Experience Manager, which can be exploited by an attacker to compromise control of the system...

PT-2016-2972 · Microsoft · Chakra Javascript Engine +3

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Microsoft Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine...

PT-2016-2974 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to a memory corruption vulnerability in Microsoft Edge, specifically in the Chakra JavaScript engine, caused by a buffer overflow. This could allow a remote...

GNU tar（POINTYFEATHER） decompression path bypass vulnerability

Vulnerability analysis reference: http://paper.seebug.org/103/ Overview GNU tar' archiver can be tricked into extracting files and directories in the given destination, regardless of the path names specified on the command line. Description GNU tar' archiver attempts to avoid path traversal attac...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

DllHijackAuditor 3.5 - Stack Overflow Vulnerability

DLL Hijack Auditor is the smart tool to Audit against the Dll Hijacking Vulnerability in any Windows application. This is one of the critical security issue affecting almost all Windows systems. Though most of the apps have been fixed, but still many Windows applications are susceptible to this...

VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability

VUPlayer is a freeware multi-format audio player for windows. Copy of the Vendor Homepage: http://vuplayer.com/vuplayer.php Technical Details & Description: ================================ The classic buffer overflow vulnerability is located in the software VUPlayer an attacker can manipulate th...

Aura Video Converter 1.6.3 DLL Hijacking

Document Title: =============== Aura Video Converter v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

TYPO3 Frontend User Registration Remote Command Execution Vulnerability

TYPO3 is a free and open source content management system. A remote command execution vulnerability exists in TYPO3 Frontend User Registration. A remote attacker could exploit the vulnerability to execute arbitrary code within the context of the application. A successful attack would corrupt the...

Microsoft Windows GDI Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. A memory corruption vulnerability exists in the Graphics Device Interface in Microsoft Windows. A remote attacker coul...

Critical Flaws Found in Network Management Systems

Eleven critical vulnerabilities have been patched in network management systems NMS from four leading manufacturers: Cloudview, Netikus, Paessler and Opmantek. The flaws enable remote cross-site scripting and command-injection attacks. Public disclosure of the vulnerabilities coincided with a...

IpNetCam A107WIRF-HNH-03 IP-Camera 0.376.223 Authentication Bypass

IpNetCam A107WIRF-HNH-03 IP-Camera auth bypass configuration download Release: 0.376.223 Copyright 2016 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permission. T...