QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule 'QNAP TS-431 QTS %q This module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access a...

Live555 Streaming Media < 2019.02.27 Multiple Vulnerabilities - Windows

Live555 Streaming Media is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Live555 Streaming Media < 2019.02.27 Multiple Vulnerabilities - Linux

Live555 Streaming Media is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

WEM 4.6 - Error accessing to the admin console: "You are not registered as a Workspace Environment Management administrator."

Error while connecting to WEM admin console: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management Administrator to gain access."...

The vulnerability in the set of tools for developing the Hub Device Client SDK for a service that implements artificial intelligence through Azure IoT Edge allows a intruder to execute arbitrary code.

The vulnerability of the Hub Device Client SDK component of the Azure IoT Edge service, which enables the implementation of artificial intelligence capabilities on local devices, is related to errors in the mechanism for accessing objects in memory. Exploiting this vulnerability could allow a...

DEBIAN-CVE-2018-20359

An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Citrix Director error "403 Forbidden : access is denied"

When you try to access Director URL in the browser, there is an error displayed: Server Error - 403 - Forbidden: Access Denied...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2018-8491

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8460...

Security Bulletin: Multiple vulnerabilities in Libxml2 affect IBM Security Network Protection

Summary The Libxml2 library is a development toolbox providing the implementation of various XML standards. Multiple vulnerabilities have been discovered in Libxml2 used with IBM Security Network Protection. Vulnerability Details CVEID: CVE-2015-5312 DESCRIPTION: An unspecified error in Libxml2...

Security update for xen (important)

This update for xen to version 4.9.2 fixes several issues. This feature was added: - Added script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU. They are triggered via 'xl vcpu-set domU N' These security issues were fixed: - CVE-2018-8897: Prevent mishandlin...

Denial of Service Vulnerability in WPS office 2016 Personal, Enterprise Editions

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize a variety of functions commonly used in office software, such as text, tables, presentations and so on. wps office 2016 enterprise edition and personal edition in the parsing of a...

Denial of Service Vulnerability in WPS Office 2016 Enterprise Edition

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial of service vulnerability exists in WPS Office 2016 Enterprise Edition when parsi...

Error When Booting Target Devices: "vDisk file access permission denied"

Booting target device to a vDisk was showing the following error after downloading the bootstrap file: "Server IP Address:6930: vDisk file access permission denied."...

Logic Vulnerability in Inventron VT Designer

INVISION is a key high-tech enterprise under the National Torch Plan. Relying on power electronics, automatic control and information technology, INVISION's business covers industrial automation, new energy vehicles, network energy and rail transportation. A logic vulnerability exists in INVITRO ...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the image conversi...

UBUNTU-CVE-2017-1000187

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

c-ares: NAPTR parser out of bounds access

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...

libsndfile 'flac_buffer_copy()' function denial of service vulnerability

libsndfile is a C library that reads and writes audio files in AIFF, AU, and WAV formats through a standard interface. A denial of service vulnerability exists in the 'flacbuffercopy' function in versions of libsndfile prior to 1.0.28. An attacker can exploit this vulnerability to cause a denial ...

VMware Fusion 8.x < 8.5.5 Drag-and-Drop Feature Guest-to-Host Code Execution (VMSA-2017-0005) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.5. It is, therefore, affected by a guest-to-host arbitrary code execution vulnerability in the drag-and-drop DND functionality due to an out-of-bounds memory access error. An attacker within a guest ca...