4349 matches found
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...
CVE-2017-11160
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...
CVE-2017-11160
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...
CVE-2017-11160
Summary: CVE-2017-11160 affects the Synology Assistant installer for Windows prior to version 6.1-15163, enabling local code execution and DLL hijacking when a Trojan horse DLL is loaded from the current working directory. The vulnerable component is the installer used by Synology Assistant; the ...
PT-2017-11785
Name of the Vulnerable Software and Affected Versions Synology Assistant versions prior to 6.1-15163 Description The issue allows local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse file in the current working directory, specifically targeting...
CVE-2017-11160: Untrusted Search Path
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...
Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access Vulnerability (CNVD-2017-28380)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...
CVE-2017-10252
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
Design/Logic Flaw
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
CVE-2017-10252
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
CVE-2017-10252: Undefined Security Weakness
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
CVE-2017-10020: Undefined Security Weakness
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access Vulnerability (CNVD-2017-24338)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...
Greenbone Security Assistant 6.0 < 6.0.9 DoS Vulnerability
Greenbone Security Assistant GSA is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Greenbone Security Assistant 6.0 < 6.0.8 XSS Vulnerability
Greenbone Security Assistant GSA is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] Fedora 26 Update: openvas-gsa-7.0.2-2.fc26
The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...
Arbitrary File Read Vulnerability in the Web Version of Fast Cloud Assistant
FastCloud Little Helper Web Edition is a free management panel system. Through the web form to manage the system, website and database program, to achieve a key to build a website, FTP, database and management of the server on the website, FTP, database, the system environment mysql, php, ftp,...
johnlewis.com XSS vulnerability
Vulnerable URL: https://www.johnlewis.com/brand/reg-ruby//N-1z13nhi/"'--! Details: Description| Value ---|--- Patched:| Yes, at 01.11.2017 Latest check for patch:| 01.11.2017 10:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4613 VIP website status:| Yes...
Chat With Hacker Assistant: hackerbot
Chat with your assistant and enjoy hacking This bot is a combination of chatbot and hacking tools Chatting Twitter account analysis Url scan File scan Ip scan Linux enumeration Linux priv escalation checker Shellshock Mimipenguin Installation git clone https://github.com/omergunal/hackerbot cd...
Dive Assistant Template Builder 8.0 - XML External Entity Injection
Dive Assistant Template Builder 8.0 - XML External Entity Injection + Exploit Title: Dive Assistant - Template Builder XXE Injection + Date: 12-05-2017 + Exploit Author: Trent Gordon + Vendor Homepage: http://www.blackwave.com/ + Software Link:...