vulhub

It is an offensive tool for Docker environments. The repository contains a collection of pre-built vulnerable Docker environments, including Flask SSTI Server-Side Template Injection and other vulnerabilities. The tool is designed to help users test and demonstrate vulnerabilities in a controlled...

OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

November 11, 2014 update for SharePoint Server 2010 Office Web Apps (KB2889835)

November 11, 2014 update for SharePoint Server 2010 Office Web Apps KB2889835 This article describes update KB2889835 for Microsoft SharePoint Server 2010 Office Web Apps that was released on November 11, 2014. This update has a prerequisite. Fixes and Improvements Improves German proofing tools ...

CVE-2019-20773

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 August 2019...

CVE-2019-20773

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 August 2019...

Why SaaS opens the door to so many cyber threats (and how to make it safer)

Cloud services have become increasingly important to many companies' daily operations, and the rapid adoption of web apps has allowed businesses to continue operating with limited productivity hiccups, even as global coronavirus restrictions have forced much of the world to work from home. But at...

Security Updates for Microsoft Office Web Apps (April 2020)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...

Security Bulletin: Instability in the Kiosk Android (CVE-2020-4353)

Summary Instability in the Kiosk Android Application leads to a bypass in MDM Restrictions Vulnerability Details CVEID: CVE-2020-4353 DESCRIPTION: IBM MaaS360 could allow a user with physical access to the device to crash the application, which may enable the user to access restricted application...

April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit

Microsoft has released its April 2020 Patch Tuesday security updates, its first big patch update released since the work-from-home era truly got underway. It’s a doozie, with the tech giant disclosing 113 vulnerabilities. Out of these, 19 are rated as critical, and 94 are rated as important...

Security Update for Microsoft Office Web Apps Server 2013 (KB4475609)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4475609) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...

KLA11746 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. Unspecified Microsoft can be exploited remotely to gain privileges. 2. An elevation of privilege vulnerability in Microsoft...

PT-2020-2594

Name of the Vulnerable Software and Affected Versions Java SE versions 7u251, 8u241, 11.0.6, and 14 Java SE Embedded version 8u241 Description The issue is related to the Security component of Oracle Java SE and Java SE Embedded, allowing an unauthenticated attacker with network access via multip...

Contact Tracing COVID-19 Infections via Smartphone Apps

Google and Apple have announced a joint project to create a privacy-preserving COVID-19 contact tracing app. Details, such as we have them, are here. It's similar to the app being developed at MIT, and similar to others being described and developed elsewhere. It's nice seeing the privacy...

MS15-131: Description of the security update for Word 2013: December 8, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more...

MS15-033: Description of the security update for Office Web Apps Server 2013: April 14, 2015

Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps...

MS15-046: Description of the security update for Office Web Apps Server 2013: May 12, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps Server 2013 that could allow remote code execution if an authenticated attack...

MS15-022: Description of the security update for Office Web Apps Server 2013: March 10, 2015

Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps...

MS16-015: Description of the security update for SharePoint Server 2010 Office Web Apps: February 9, 2016

MS16-015: Description of the security update for SharePoint Server 2010 Office Web Apps: February 9, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...