The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...

Install Python for Windows

This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...

PT-2020-19365 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2 Description: The issue arises when extracting PHAR files on Windows using the phar extension. Certain content inside a PHAR file could lead to a one-byte read past the allocat...

Adobe Illustrator CC Memory Corruption Vulnerability (CNVD-2020-03924)

Illustrator CC is a vector graphics creation tool from Adobe. A memory corruption vulnerability exists in Adobe Illustrator CC 24.0 and earlier versions for Windows-based platforms, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Check Point Endpoint Security Client Backlink Vulnerability

Check Point Endpoint Security Client is an endpoint security protection software from Check Point Israel. A backlink vulnerability exists in versions of Check Point Endpoint Security Client prior to E82.10 for Windows-based platforms. The vulnerability originates from a network system or product...

CVE-2019-11049

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations...

CVE-2019-1465

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466, CVE-2019-1467...

UBUNTU-CVE-2019-13762

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code...

Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Cybersecurity researchers have spotted a new variant of the Snatch ransomware that first reboots infected Windows computers into Safe Mode and only then encrypts victims' files to avoid antivirus detection. Unlike traditional malware, the new Snatch ransomware chooses to run in Safe Mode because ...

Code42 Software Code42 server code issue vulnerability

Code42 Software Code42 is an enterprise-class data protection system from Code42 Software. Code42 server is a server-side program for Code42 that detects insider threats and prevents data leakage and loss. A code issue vulnerability exists in Code42 Software Code42 server 7.0.2 and earlier versio...

Cisco Webex Teams Code Issue Vulnerability

Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes video conferencing, group messaging and file sharing features. A code issue vulnerability exists in Cisco Webex Teams for Windows-based platforms, which stems from the program failing to adequately validate...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

GHSA-89R3-RCPJ-H7W6 Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

Adobe Illustrator Memory Corruption Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms. An attacker can exploit the vulnerability to execute code...

Cisco Webex Network Recording Player and Webex Player Buffer Overflow Vulnerability

Cisco Webex Network Recording Player and Cisco Webex Network Webex Player are both Cisco players for playing video conference recordings. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows platforms, which can be exploited by an...

Adobe Illustrator DLL Hijacking Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms, which can be exploited by attackers to elevate privileges...

JetBrains Toolbox Elevation of Privilege Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A security vulnerability exists in versions of JetBrains Toolbox prior to 1.15.5666 for Windows-based platforms. An attacker can exploit the vulnerability to elevate privileges...

chromium-browser: External URIs may trigger other browsers

Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

ThinVNC 1.0b1 Authentication Bypass

Exploit Title: ThinVNC 1.0b1 - Authentication Bypass Date: 2019-10-17 Exploit Author: Nikhith Tumamlapalli Contributor WarMarX Vendor Homepage: https://sourceforge.net/projects/thinvnc/ Software Link: https://sourceforge.net/projects/thinvnc/files/ThinVNC1.0b1/ThinVNC1.0b1.zip/download Version:...