Adobe Photoshop CC Local Privilege Escalation Vulnerability

Adobe Photoshop PS CC is the latest set of image processing and drawing software from the American company Audobee Adobe. A security vulnerability exists in Adobe PS CC. The vulnerability can be exploited by an attacker to gain privileges...

Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2017-04980)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A remote code execution vulnerability exists in Adobe Acrobat and Reader. An attacker could use this vulnerability to compromise an affected...

Google Android Qualcomm Audio Driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in Google Android Qualcomm Audio Driver. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the kernel context...

Multiple Huawei Server Design Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...

Internet Information Services (IIS) 6.0 Vulnerability

US-CERT is aware of active exploitation of a vulnerability in Windows Server 2003 Operating System Internet Information Services IIS 6.0. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. On June 15, 2015, Microsoft ended support for Windows...

Huawei Mate 9 Phone Finder bypasses security vulnerability

Huawei Mate9 is a smartphone from Chinese company Huawei huawei.PhoneFinder Phone Finder is one of the security mechanisms which is mainly used to ensure that the phone is not bricked or restored to factory settings after it is lost and stolen. A security bypass vulnerability exists in the Phone...

BlueIris Denial of Service Vulnerability

BlueIris is a video surveillance software. BlueIris suffers from a denial of service vulnerability. It allows attackers to exploit the vulnerability to launch denial of service attacks...

MikroTik RouterOS L2TP Client Man-in-the-Middle Attack Vulnerability

MikroTik RouterOS is a routing operating system developed on the Linux kernel. A security vulnerability in the L2TP Client of MikroTik RouterOS allows remote attackers to exploit the vulnerability to gain unauthorized access to an L2TP server via a man-in-the-middle attack...

Google Android Bluetooth Remote Lift Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.The Android Bluetooth project aims to provide a simple API to access Android's Bluetooth stack. A remote boost vulnerability exists in Google Android Bluetooth. A remote attacker...

Windows Exploit Suggester

Windows Exploit Suggester This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. Windows...

Nextcloud: WordPress <= 4.6.1 Stored XSS Via Theme File

Hello Team, Description:- Vulnerable code is located at /wp-admin/includes/class-theme-installer-skin.php POC:- https://nextcloud.com/readme.html F151887 FIX:- Upgrade wordpress to latest Refer:- https://wpvulndb.com/vulnerabilities/8718 https://www.mehmetince.net/low-severity-wordpress/ Attack...

Xen Denial of Service Vulnerability (CNVD-2016-12884)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial of service vulnerability...

Adobe indesign Memory Corruption Vulnerability

Adobe indesign is an American Adobe company launched a set in the field of professional typography design software. A memory corruption vulnerability exists in Adobe indesign, which can be exploited by an attacker to execute arbitrary code in the context of a user running the affected application...

Apple macOS Security Bypass Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security bypass vulnerability exists in Apple macOS. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Linux Kernel Information Disclosure Vulnerability (CNVD-2016-11073)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux Kernel has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Axessh 4.2.2 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AXESSH-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.labf.com Product: ============= Axessh 4.2.2 Axessh is a SSH client. It is a superb terminal...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2016-10570)

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A buffer overflow vulnerability exists in version 1.0 of FreeFloat FTP Server. A remote attacker can exploit this vulnerability to execute arbitrary code...

Zortam MP3 Studio 21.15 - Insecure File Permissions Vulnerability

Zortam Mp3 Media Studio is a great all-in-one music tool for organizing your Mp3/Karaoke collection for editing Mp3 ID3 tags, ripping your CD, normalizing Mp3, converts Mp3/Wav and Wav/Mp3, to get song lyric and cover arts from the internet and keeping your music collection well organized. Copy o...

JasPer Denial of Service Vulnerability (CNVD-2016-10036)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

ImageMagick heap buffer overflow vulnerability (CNVD-2016-09855)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A heap buffer overflow vulnerability exists in the 'pixel-accessor.h' script in ImageMagick version 7.0.3.0 because it fails to adequately bounds-check the data before the user provides it ...