Adobe Photoshop CC Local Privilege Escalation Vulnerability

Adobe Photoshop PS CC is the latest set of image processing and drawing software from the American company Audobee Adobe. A security vulnerability exists in Adobe PS CC. The vulnerability can be exploited by an attacker to gain privileges...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Campaign, Flash Player, Acrobat and Reader, Photoshop CC, and Creative Cloud. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are...

SA142 : Invalid TCP Packet Generation DoS in SSL Visibility

SUMMARY The SSL Visibility appliance may, under certain circumstances, generate invalid TCP reset RST packets to remote SSL servers when terminating an intercepted SSL connection. Some SSL servers may ignore the invalid RST packet received and keep the TCP connection open. A malicious SSL client,...

Java AMF3 exposure remote code execution vulnerability-vulnerability warning-the black bar safety net

! Recently, a German security team @codewhitesec found a Java AMF3 plurality of functions to achieve vulnerability, the American CERT/CC also issued a safety warning. An attacker can remotely by tricking or controlling the service connection, in AMF3 reverse sequence operation when the execution ...

lust18.cc XSS vulnerability

Vulnerable URL:...

GNU Chess Buffer Overflow Vulnerability

GNU Chess aka gnuchess is a chess program. A stack buffer overflow vulnerability exists in the ValidateMove function in the frontend/move.cc file in GNU Chess 6.2.3 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with large input values...

Beta Firmware Updates Available for Vulnerable Netgear Routers

Netgear has begun pushing out beta versions of firmware updates that will address a critical vulnerability that was disclosed late last week. The networking vendor also confirmed that many more routers in its Nighthawk line are vulnerable than originally reported. The flaw allows attackers to car...

Content-Spoofing in "dav" app - ownCloud

The exception message displayed on the DAV endpoints contained partially user-controllable input leading to a potential misrepresentation of information. Affected Software ownCloud Server 9.1.2 CVE-2016-???? core/96b8afe48570bc70088ccd8f897e9d71997d336e ownCloud Server 9.0.6 CVE-2016-????...

tango.my1.cc XSS vulnerability

Open Bug Bounty ID: OBB-189774 Description| Value ---|--- Affected Website:| tango.my1.cc Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Edit permission check not enforced on WebDAV COPY action - ownCloud

The WebDAV endpoint was not properly checking the permission on a WebDAV "COPY" action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files. Affected Software ownCloud Server 9.0.4 CVE-2016-????...

The vulnerability of Google Chrome’s browser allows a malicious actor to circumvent sandboxing restrictions.

Google Chrome browser contains a vulnerability related to incorrect block merging in the PointerCompare function of codegen.cc within Seccomp-BPF. Exploiting this vulnerability allows malicious actors to bypass sandbox restrictions by accessing the render process...

UBUNTU-CVE-2016-1678

objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JavaScript code...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2016-03257)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability in the 'Zone::New' function in the zone.cc file of Google V8 versions prior to 5.0.71.47 used in Google Chrome versions prior to...

Adobe Capture CC - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Adobe Capture CC published at the 'play' market has multiple vulnerabilities...

mp3.cc XSS vulnerability

Vulnerable URL: http://mp3.cc/registration/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21199 Google Pagerank| 0 VIP website status:| Yes Check mp3.cc SSL connection:| Grade: F...

IKE/IKEv2 protocol implementations may allow network amplification attacks

Overview Implementations of the IKEv2 protocol are vulnerable to network amplification attacks. Description CWE-406: Insufficient Control of Network Message Volume Network Amplification IKE/IKEv2 and other UDP-based protocols can be used to amplify denial-of-service attacks. In some scenarios, an...

Adobe Bridge CC Version Detection

Detects the installed version of Adobe bridge cc on Windows. The script logs in via smb, searches for adobe in the registry, gets the Adobe bridge cc installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code. ...

Adobe Photoshop CC Denial of Service Vulnerability (CNVD-2016-01085)

Adobe Photoshop CC, or Creative Cloud, is a cloud-based era of graphics processing software developed by Adobe in the United States. A denial of service vulnerability exists in Adobe Photoshop CC 2014 prior to 15.2.4, Photoshop CC 2015 prior to 16.1.2, and Bridge CC prior to 6.2, which allows...

CVE-2016-0953

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0952...