Microsoft Excel Buffer Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Excel 2013 Service Pack ...

What’s New in InsightAppSec and tCell: Q4 2020 in Review

It’s crazy to believe 2020 has come to an end, and we’re sure we’re not alone in our excitement for 2021! Without a doubt, 2020 has presented some challenges for us all in the security world, as many companies quickly adopted a work-from-home model and pivoted from an in-store experience quickly ...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 1

Package name:xms10.13.0.10129.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces:None Replaced by:CTX296934 Date:December, 2020 Languages supported:English US Readme version:1.00 Readme Revision History Version| Date| Change Description ---|---|--- 1.00| December, 2020|...

CVE-2020-26165

qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/actions/actions.class.php because unserialize is used...

h1-ctf: First CTF ever!

Pretext Started looking into hacking this autumn and then found out HackerOne was doing a Christmas themed CTF. Further investigation showed that the deplorable Grinch might be up to no good again - Christmas is in danger! TLDR Lots of hacking took place, the Grinch was stopped, Christmas saved a...

The vulnerability of Microsoft Excel, Microsoft Office programs, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprise lies in the fact that it allows code to execute outside of the buffer, enabling an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps packages lies in coding errors, which allow attackers to exploit them to disclose protected information.

The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft Office, and Office Online Server is related to code errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Excel editors, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft Office, and Office Online Server are related to code errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

Jackman-AL00D 资源管理错误漏洞

Huawei Jackman-AL00D is a basic firmware for mobile devices from Huawei China. A resource management error vulnerability exists in Jackman-AL00D version 8.2.0.185 C00R2P1, which arises from improper management of system resources e.g., memory, disk space, files, etc. by a networked system or...

h1-ctf: Hacky Holidays Writeup

On December 12th, 2020, the CTF became live and the scope that we are allowed to attack was In Scope Domain - hackyholidays.h1ctf.com Our main motive was to infiltrate his network and take him down. The challenges appeared one by one till 24th of December. Here we will be going through all the...

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite, related to access control deficiencies, allows attackers to bypass existing security measures.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to bypass existing security measures...

CVE-2020-35693

On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy BLE device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offer...

CVE-2020-35693

On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy BLE device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offer...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr

Shadow IT is hardly a hidden threat to security professionals. Gartner was warning, way back in 2016, that 1 in 3 successful attacks experienced by enterprises would come from the use of unsanctioned apps by 2020. Code42’s Data Exposure Report just about proves Gartner’s prediction, showing that...

CVE-2020-0481

In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges needed. User interaction is not needed for...

Number withdrawn

Docker is an open source application container engine from the American company Docker. It supports the creation of a container lightweight virtual machine and the deployment and running of applications on Linux systems, as well as the automated installation, deployment and upgrading of...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

Citrix Virtual Apps and Desktops Licensing Issues Vulnerability

Citrix Systems Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops that originates from an authenticated user executi...