Commands and Tools for Embedded Reverse Engineering

We’ve been training a lot of people to look at embedded systems. The training is intensive, and it can be hard to remember all the commands and tools used. This is just a quick rundown of those tools with enough information to jog your memory! Basic Commands If we want to see the content of a fil...

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Debian: Security Advisory (DLA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Microsoft Word text editors arises from the possibility of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word’s text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Your Linux Can Get Hacked Just by Opening a File in Vim or Neovim Editor

Linux users, beware! If you haven't recently updated your Linux operating system, especially the command-line text editor utility, do not even try to view the content of a file using Vim or Neovim. Security researcher Armin Razmjou recently discovered a high-severity arbitrary OS command executio...

[SECURITY] Fedora 28 Update: ckeditor-4.11.2-1.fc28

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

CVE-2018-19008

The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution...

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol.

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using...

ABB CP400PB TextEditor Input Validation Vulnerability

ABB CP400PB is a set of HMI programming software from ABB Switzerland.TextEditor is one of the text editors. An input validation vulnerability exists in the file parser of TextEditor version 2.0 in ABB CP400PB 2.0.7.05 and earlier versions, which stems from the program failing to prevent the...

The vulnerability of the Word text editor, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Word text editor is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

TerraMaster TOS Cross-Site Scripting Vulnerability

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization, etc. Text Editor is one of the text editor. A cross-site scripting vulnerability...

CVE-2018-13360

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter...

CVE-2018-13360

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter...

CVE-2018-13360

TerraMaster TOS 3.1.03 Text Editor is vulnerable to cross-site scripting via the filename URL parameter, enabling an attacker to inject and execute JavaScript. This is documented in CVE-2018-13360 and corroborated by CNVD/NVD entries and related OpenVAS data, all indicating the issue centers on t...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-28241)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

CVE-2018-3132

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3132

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3132

The CVE-2018-3132 entry applies to the Rich Text Editor subcomponent of Oracle PeopleSoft Enterprise PeopleTools. Affected versions are 8.55 and 8.56. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, with user interaction required, to perform unauthorized u...

EKFiddle v.0.8.2 - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

CmsEasy Cross-Site Request Forgery Vulnerability (CNVD-2018-14725)

CmsEasy is a CMS Content Management System for creating responsive websites from China's Kyushu E-Tech. rich text editor is one of the rich text editors. A cross-site request forgery vulnerability exists in the rich text editor in CmsEasy version 6.120180508. A remote attacker can exploit this...