CVE-2016-2817

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS UXSS attacks via a craft...

Design/Logic Flaw

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS UXSS attacks via a craft...

Foxit PhantomPDF < 7.3.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An...

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. The idea is that emulators can run the code safely for a short time, giving t...

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans

Exploit for windows platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. The idea is that...

Microsoft Windows PDF Library Remote Code Execution Vulnerabilities (3143081)

This host is missing a critical security update according to Microsoft Bulletin MS16-028 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-0058

Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted PDF document that triggers API calls, aka "Microsoft PDF Library Buffer Overflow Vulnerability."...

Microsoft Windows PDF Library Remote Code Execution Vulnerabilities (3138938)

This host is missing a critical security update according to Microsoft Bulletin MS16-012 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows PDF Library Buffer Overflow (MS16-012; CVE-2016-0058)

A buffer overflow vulnerability exists in Microsoft Windows PDF Library. The vulnerability is due to improper handling of application programming interface API calls. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...

MS16-012: Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3138938)

The remote Windows host is missing a security update. It is, therefore, affected by multiple code execution vulnerabilities : - A remote code execution vulnerability exists in Windows Reader. An attacker can exploit this, by convincing a user to open a specially crafted file, to execute arbitrary...

MS16-012: Description of the security update for Windows PDF Library: February 9, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if Microsoft Windows PDF Library incorrectly handles application programming interface API calls. This could allow an attacker to run arbitrary code on the user’s system.SummaryThis security update resolves vulnerabilities...

CVE-2015-3251

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls...

Malware Analysis System: Cuckoo Sandbox

Cuckoo Sandbox is an advanced, extremely modular, and 100% open source automated malware analysis system with infinite application opportunities. By default it is able to: Analyze many different malicious files executables, office documents, pdf files, emails, etc as well as malicious websites...

Schneider Electric InduSoft Web Studio Remote Agent Remote Code Execution (CVE-2015-7374)

The vulnerability is due to lack of authentication to the Remote Agent Service which allows attackers to execute API calls on the service remotely. By sending crafted requests to the service, a remote unauthenticated attacker can exploit this vulnerability to execute code under the context of the...

InduSoft Web Studio Remote Agent Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of InduSoft WebStudio. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Remote Agent service listening on TCP port 1234. The issue lies in the lack o...

Code injection

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...

CVE-2015-5838

CVE-2015-5838 is an Apple iOS SpringBoard vulnerability where access to privileged API calls was not properly restricted, enabling a crafted app to spoof the dialog windows of another app. The connected Apple iOS security update listing (Apple SA-2015-09-16-1) attributes this CVE to the SpringBoa...

Adobe Acrobat and Reader API Calls Code Execution (APSB15-15: CVE-2015-4445)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...

CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

CVE-2015-5531

CVE-2015-5531 is a directory traversal vulnerability in Elasticsearch affecting versions 1.0.0 through 1.6.0, allowing a remote attacker to read arbitrary files via vectors related to the snapshot API. Multiple connected sources document the issue and reproduce/exploit paths (e.g., elasticsearch ...