6747 matches found
CVE-2017-12252: Improper Input Validation
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
PT-2017-13611
Name of the Vulnerable Software and Affected Versions Horde Image versions 2.0.0 through 2.5.1 Description A Remote Code Execution issue has been found in the Horde Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. This issue is not exploitable through any...
PT-2017-12428
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Discovery Utility affected versions not specified Description A vulnerability could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability,...
Cisco FindIT DLL Preloading Vulnerability
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
[SECURITY] Fedora 25 Update: psiconv-0.9.8-22.fc25
A conversion utility for the Psion files...
[SECURITY] Fedora 26 Update: psiconv-0.9.8-22.fc26
A conversion utility for the Psion files...
India Goods and Services Tax Network (GSTN) Offline Utility Elevation of Privilege Vulnerability
A security vulnerability exists in GSTNofflinetool in the India Goods and Services Tax Network GSTN Offline Utility tool prior to version 1.2. A local attacker can exploit this vulnerability by replacing winstart-server.vbs with arbitrary VBScript code to gain privileges...
Disguised as Citrix Utility, Kedi RAT Exploits Gmail to Transfer Data
By Uzair Amir A Remote Access Trojan RAT is one of the most used This is a post from HackRead.com Read the original post: Disguised as Citrix Utility, Kedi RAT Exploits Gmail to Transfer Data...
CVE-2017-13779
GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...
CVE-2017-13779
GSTN_offline_tool (GSTN Offline Utility) prior to version 1.2 stores winstart-server.vbs in C:\GST Offline Tool with insecure permissions, enabling local privilege escalation by replacing the VBScript with arbitrary code (e.g., a reverse shell). Affected: GSTN Offline Utility before 1.2. Root cau...
GNU Patch Unauthenticated File Modification
The vulnerability of the Git-style programmatic Unix utility GNU Patch for operating systems like Ubuntu and Fedora is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files with the target user’s...
Debian DLA-1094-1 : tiff3 security update
A heap based buffer overflow has been discovered in the tiff2pdf utility, part of the Tag Image File Format TIFF library. A PlanarConfig=Contig image can cause an out-of-bounds write related to the ZIPDecode function. A crafted input may lead to a remote denial of service attack or an arbitrary...
Default configuration
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2017-10851
Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-10851
CVE-2017-10851 affects Fuji Xerox ContentsBridge Utility for Windows (versions ≤ 7.4.0). The issue is an untrusted DLL search path (CWE-427) that allows a Trojan DLL loaded from an unspecified directory, enabling privilege escalation when running the installer. Affected installations include the ...
CVE-2017-10851: Untrusted Search Path
Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...