5709 matches found
Microsoft Office Word Remote Code Execution Vulnerability (2830399)
This host is missing an important security update according to Microsoft Bulletin MS13-043. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-043: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399)
The version of Office and/or Microsoft Word Viewer installed on the remote host is affected by a remote code execution vulnerability due to the way that Microsoft Word parses content in Word files. To exploit this issue, an attacker would need to trick a user into opening a specially crafted file...
Security Update for Word 2003 (KB2810046)
A security vulnerability exists in Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Word CVE-2013-1335 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user, which can lead to a complete compromise of the affected computer. Technologies Affected Microsoft Office 2003...
Stealthy BaneChant Trojan Lurks in Word File, Relies on Multiple Mouse Clicks
Much like malware that was discovered last year, a new Trojan has been reported that relies on detecting mouse clicks to evade sandbox analysis. BaneChant masquerades as a Word document and incorporates advanced evasion techniques making it stealthier than its predecessor. Researchers at FireEye...
Windows Gather Microsoft Office Word UNC Path Injector
This module modifies a remote .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. Verified to work with Microsoft Word 2003, 2007, 2010, and 2013. In order to get the hashes the auxiliary/server/capture/smb module can be used. This module requires Metasploit:...
Microsoft Word CSS Processing Code Execution - Improved Performance (MS08-026; CVE-2008-1434)
A remote code execution vulnerability has been identified in Microsoft Word...
[L517] Simple WordList Generator for Windows
L517 is a word-list generator for the Windows Operating System. I wrote L517 to be the only word-list generator and editor I would ever need. L517 is small considering what it does, it is fast considering it's a Windows app, and it is lightweight when not loading astronomically large lists. A...
VulnCheck KEV: CVE-2009-0563
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field...
SuSE Update for calligra openSUSE-SU-2012:1061-1 (calligra)
Check for the Version of calligra OpenVAS Vulnerability Test $Id: gbsuse201210611.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for calligra openSUSE-SU-2012:1061-1 calligra Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...
openSUSE: Security Advisory for calligra (openSUSE-SU-2012:1061-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Researchers See Spike in Attacks Against Uyghur Users
Researchers have noticed a spike in cyberattacks over the past few weeks targeting the Uyghur people, a Turkic ethnic group based primarily in China and Kazakhstan. The attacks have been exploiting a Microsoft Word vulnerability patched in June 2009, according to a Securelist post by Kaspersky La...
Chinese Government targets Uyghur group by malware attack
An old vulnerability in Word for OS X is being used in increasing levels of attacks, probably government-sponsored hacking programs against Uyghur group, including Tibetans, NGOs and human rights organizations. A number of attacks have been seen directed at the World Uyghur Congress, a Munich-bas...
Chinese Government targets Uyghur group by malware attack
An old vulnerability in Word for OS X is being used in increasing levels of attacks, probably government-sponsored hacking programs against Uyghur group, including Tibetans, NGOs and human rights organizations. A number of attacks have been seen directed at the World Uyghur Congress, a Munich-bas...
Bohemian Arbitary File Upload vulnerability
Exploit for php platform in category web applications Exploit Title: "Bohemian Arbitary File Upload Author: NEtBomber Contact: http://facebook.com/net.bomba Software Link: http://bohemiawebsites.com/component/option,comjdownloads/Itemid,382/cid,71/task,view.download/ Google Dork:intext:"CURRENT...
Microsoft Word UNC Path Injector
This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...
RHEL 4 / 5 : openoffice.org (RHSA-2009:1426)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1426 advisory. OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet, presentation...
Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)
This host is missing a critical security update according to Microsoft Bulletin MS13-002. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Korean Cyber espionage attack Targets Russia
Ask an expert on cyber espionage and he for sure he will speak of China, the most active and advanced country in this sector, this time a clamorous campaign apparently originated from Korea has been discovered. Security company FireEye collected evidences of a cyber espionage campaign, named...
