ZYCHCMS V03 Arbitrary File Write Vulnerability in '/include/page.asp' File

ZYCHCMS is an enterprise website management system. ZYCHCMS V03 '/include/page.asp' file contains an arbitrary file write vulnerability. The vulnerability allows attackers to write scripts to arbitrary files to gain server privileges...

Remote Code Execution (RCE)

github.com/docker/docker is vulnerable to arbitrary file writes and remote code execution RCE. Attackers can perform these attacks using a hard link image attack in an image archive or through a symlink attack...

EulerOS 2.0 SP1 : python-pillow (EulerOS-SA-2017-1049)

According to the version of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in python-pillow. A crafted image file with negative dimensions could cause a buffer to be under-allocated, leading...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06701)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06710)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06708)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06709)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin GMP sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data with...

CVE-2017-7976

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...

CVE-2017-7976

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...

Integer overflow

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...

CVE-2017-7975

CVE-2017-7975 affects Artifex jbig2dec 0.13 (used in Ghostscript). The root cause is an integer overflow in jbig2_build_huffman_table within jbig2_huffman.c, causing out-of-bounds writes when processing crafted JBIG2 files. Impact per the sources includes denial of service (application crash) and...

CwCMS-PHP Enterprise Website Management System Has Multiple Cross-Site Scripting Vulnerabilities

CwCMS-PHP is an enterprise website management system. Version 1.0 of the CwCMS-PHP enterprise website management system has multiple cross-site scripting vulnerabilities that allow attackers to write to arbitrary executable files and gain server privileges...

Information : XenApp/XenDesktop Performance Counters

1. CitrixBrokerService 1. Application Cache Writes 2. Brokered Sessions 3. Database Avg. Transaction Time 4. Database Connected 5. Database Transaction Errors/sec 6. Database Transaction/sec 7. Deregistration Requests 8. Expired Launches/sec 9. Expired Registrations 10. Expired Registration/sec...

Rapid7 Metasploit Directory Traversal Vulnerability

Metasploit Pro is a guided penetration testing platform. A directory traversal vulnerability exists in the Meterpreter extapi Clipboard.parsedump function in versions prior to Rapid7 Metasploit 4.13.0-2017020701. An attacker can exploit the vulnerability to write arbitrary files on the Metasploit...

Rapid7 Metasploit Directory Traversal Vulnerability (CNVD-2017-02664)

Metasploit Pro is a guided penetration testing platform. A directory traversal vulnerability exists in the Meterpreter stdapi CommandDispatcher.cmddownload function in versions prior to Rapid7 Metasploit 4.13.0-2017020701. An attacker can exploit the vulnerability to write arbitrary files on the...

CVE-2017-5231

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmddownload function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit...

CVE-2017-6307

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...

UBUNTU-CVE-2017-6310

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...

Code injection

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...