Atlassian Sourcetree for Windows Injection Vulnerability

Atlassian Sourcetree for Windows is a free Windows-based Git and Mercurial client tool from Atlassian Australia that manages repositories using a visual interface. A security vulnerability exists in Atlassian Sourcetree for Windows prior to version 2.5.5.0. An attacker can exploit the vulnerabili...

CVE-2018-0968

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2,...

CVE-2018-6661

DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature...

Privilege escalation

DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature...

CVE-2018-6661 TS102801 True Key DLL Side-Loading vulnerability

DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature...

CVE-2018-7484

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...

Hackers Exploit 'Telegram Messenger' Zero-Day Flaw to Spread Malware

A zero-day vulnerability has been discovered in the desktop version for end-to-end encrypted Telegram messaging app that was being exploited in the wild in order to spread malware that mines cryptocurrencies such as Monero and ZCash. The Telegram vulnerability was uncovered by security researcher...

Zero-day vulnerability in Telegram

In October 2017, we learned of a vulnerability in Telegram Messenger's Windows client that was being exploited in the wild. It involves the use of a classic right-to-left override attack when a user sends files over the messenger service. Right-to-left override in a nutshell The special nonprinti...

Automattic: [Simplenote for Windows] Client RCE via External JavaScript Inclusion leveraging Electron

Hi, A carefully crafted injection in the Markdown parser within Simplenote for Windows can be leveraged to achieve remote code execution via an external JavaScript file. The nature of Simplenote's content sharing system, which makes use of tags containing email addresses, means that an adversary...

Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability

Document Title: =============== Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2102 Ticket:...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

CVE-2017-12284

The CVE-2017-12284 issue affects Cisco Jabber for Windows Client (web interface). Affected component: the web interface of Cisco Jabber for Windows. Root cause: insufficient input and validation checks that allow an authenticated, local attacker to issue commands and view profile information beyo...

Cisco Jabber for Windows Client Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

Vulnerability in TPM could allow Security Feature Bypass

Executive Summary This advisory addresses CVE-2017-15361, also referred to as "Return of Coppersmith's Attack" ROCA. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware...

Microsoft Office Groove - Workspace Shortcut Arbitrary Code Execution

Microsoft Office Groove - Workspace Shortcut Arbitrary Code Execution Title: MS Office Groove 'Workspace Shortcut' Arbitrary Code Execution Vulnerability Date: September 28th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/...

TeamSpeak Server Buffer Overflow Vulnerability

TeamSpeak Serve is a voice over IP communication system server designed specifically for online gamers. A buffer overflow vulnerability exists in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33. An attacker can exploit this vulnerability to cause a denial of service WINDOWS client crash...

CVE-2017-8290

A potential Buffer Overflow Vulnerability from a BB Code handling issue has been identified in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33, it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server...

Buffer overflow

A potential Buffer Overflow Vulnerability from a BB Code handling issue has been identified in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33, it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server...