1808 matches found
Zoom IT installer unauthorized operation vulnerability
Zoom IT is a screen zoom and annotation tool for technical presentations from Zoom USA. A security vulnerability exists in versions of Zoom IT installer ZoomInstallerFull.msi prior to 4.6.10 for Windows-based platforms. An attacker can exploit the vulnerability to delete restricted files...
Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24443)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the Export command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, which stems from the program's failure t...
Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds write remote code execution vulnerability (CNVD-2020-24449)
Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF for Windows platforms when handling U3D objects embedded in PDFs, which stems from the progr...
CVE-2020-7278
Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...
CVE-2020-7278
Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...
JetBrains PyCharm Information Disclosure Vulnerability
JetBrains PyCharm is an integrated development environment IDE for the Python language from the Czech company JetBrains. An information disclosure vulnerability exists in JetBrains PyCharm version 2019.2.5 and version 2019.3 Windows. The vulnerability stems from errors such as configuration durin...
Palo Alto Networks GlobalProtect Agent Code Issue Vulnerability
Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, Inc. that provides firewall monitoring and threat prevention. GlobalProtect Agent is an agent program that provides firewall monitoring and threat prevention features. A code issue vulnerability...
TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln
Posted by Maddie Stone, Project Zero INTRODUCTION I’m really interested in 0-days exploited in the wild and what we, the security community, can learn about them to make 0-day hard. I explained some of Project Zero’s ideas and goals around in-the-wild 0-days in a November blog post. On December’s...
FinalWire AIDA64 Code Execution Vulnerability
FinalWire AIDA64 is a system information, diagnostic and auditing program from the Hungarian company FinalWire that runs on the Microsoft Windows platform. A security vulnerability exists in the kerneld.sys file in FinalWire AIDA64 versions prior to 5.99. An attacker can exploit the vulnerability...
Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...
Foxit Studio Photo Resource Management Error Vulnerability
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...
Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18405)
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PSD files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...
Install Python for Windows
This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...
PT-2020-19365 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2 Description: The issue arises when extracting PHAR files on Windows using the phar extension. Certain content inside a PHAR file could lead to a one-byte read past the allocat...
Adobe Illustrator CC Memory Corruption Vulnerability (CNVD-2020-03924)
Illustrator CC is a vector graphics creation tool from Adobe. A memory corruption vulnerability exists in Adobe Illustrator CC 24.0 and earlier versions for Windows-based platforms, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Check Point Endpoint Security Client Backlink Vulnerability
Check Point Endpoint Security Client is an endpoint security protection software from Check Point Israel. A backlink vulnerability exists in versions of Check Point Endpoint Security Client prior to E82.10 for Windows-based platforms. The vulnerability originates from a network system or product...
CVE-2019-11049
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations...
CVE-2019-1465
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466, CVE-2019-1467...