WampServer Cross-Site Request Forgery Vulnerability (CNVD-2019-17113)

WampServer is a Windows-based Web development platform . The platform integrates Apache, MySQL and PHP development environment. A cross-site request forgery vulnerability exists in the addvhost.php file in WampServer versions prior to 3.1.9. The vulnerability stems from the WEB application not...

Adobe Campaign Classic Information Disclosure Vulnerability (CNVD-2019-18623)

Adobe Campaign Classic ACC is a suite of cross-channel customer experience marketing platforms from the American company Audobee Adobe. The platform features real-time interaction management, Adobe Experience Cloud integration, data management and integration. An information disclosure...

Mozilla Firefox and Mozilla Firefox ESR crash generation server resource management error vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation.Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. crash generation server is one of the crash information generation servers. A resource...

DeviceViewer suffers from a password field overflow vulnerability

DeviceViewer is a Windows-based IP camera viewing application. DeviceViewer suffers from a password field overflow vulnerability that can be exploited by an attacker to gain privileges on a user's system...

Easy Chat Server 3.1 - message Denial of Service (PoC)

Easy Chat Server 3.1 - message Denial of Service PoC !/usr/bin/python --------------------------------------------------------- Title: Easy Chat Server Version 3.1 - DOS Date: 2019-05-07 Author: Miguel Mendez Z Team: www.exploiting.cl Vendor: http://www.echatserver.com Software Link:...

Foxit Reader and Foxit PhantomPDF for Windows Information Disclosure Vulnerability (CNVD-2019-13809)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the parsing of HTML files in Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier on Windows...

Foxit Reader and Foxit PhantomPDF for Windows Resource Management Error Vulnerability (CNVD-2019-13822)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the removeField method in Foxit Reader 9.4.1.16828 and earlier versions, Foxit PhantomPDF 8.3.9.41099 and earlier versions, and Foxit PhantomPDF...

Foxit Reader and Foxit PhantomPDF Information Disclosure Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the removeField method in Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier for Windows...

Foxit Reader and Foxit PhantomPDF for Windows Resource Management Error Vulnerability (CNVD-2019-13821)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the removeField method in Foxit Reader 9.4.1.16828 and earlier versions, Foxit PhantomPDF 8.3.9.41099 and earlier versions, and Foxit PhantomPDF...

Foxit Reader and Foxit PhantomPDF for Windows Resource Management Error Vulnerability (CNVD-2019-13815)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the conversion of HTML files to PDF in Foxit Reader 9.4.1.16828 and earlier versions for Windows-based platforms, Foxit PhantomPDF 8.3.9.41099 and...

Foxit Reader and Foxit PhantomPDF for Windows Information Disclosure Vulnerability (CNVD-2019-13819)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the resetForm method of Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier for Windows...

Juniper Networks Identity Management Service Input Validation Error Vulnerability

Juniper Networks Identity Management Service JIMS is a network identity authentication management service from Juniper Networks, USA. The product is managed by collecting and mapping user and device information. An input validation error vulnerability exists in Juniper Networks JIMS versions prio...

UBUNTU-CVE-2019-8518

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2019-10625)

Adobe Shockwave Player is a multimedia player product from the American company Adobe. The product is able to Adobe Director a multimedia production software produced by the application published to the Internet, installed with the Shockwave plug-in browser can be viewed. A memory corruption...

DEBIAN-CVE-2018-4312

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

IBM Spectrum Protect Privilege Misconfiguration Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

Foxit Reader and PhantomPDF Out-of-Bounds Read Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in the processing of PDF files in Foxit Reader 9.3.0.10826 and earlier versions for...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2019-08534)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox ESR versions...

Advanced Host Monitor 11.92 beta - Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: Advanced Host Monitor 11.92 beta - Local Buffer Overflow EggHunter Date:...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability (CNVD-2019-07813)

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...