CVE-2018-0841

CVE-2018-0841 is a remote code execution vulnerability in Microsoft Office 2016 Click-to-Run (C2R) stemming from how Office objects are handled in memory. The NVD entry (and corroborating sources) describe it as a network-exploitable issue with high impact (C/H/I/A all High) and a CVSSv3 base sco...

CVE-2018-0850

CVE-2018-0850 affects Microsoft Outlook and Office components across Outlook 2007/2010/2013/2016 and Office 2016 Click-to-Run. The root cause is how the format of incoming messages is validated, enabling elevation of privileges when a victim processes a specially crafted email. Connected sources ...

PT-2018-5015

Name of the Vulnerable Software and Affected Versions HPE Diagnostics versions 9.24 IP1, 9.26, 9.26IP1 Description A Remote click jacking issue was found in the software. Recommendations For HPE Diagnostics version 9.24 IP1, update to a version that fixes this issue. For HPE Diagnostics version...

CVE-2018-0841: Undefined Security Weakness

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

PT-2018-9100

Name of the Vulnerable Software and Affected Versions: Microsoft Office 2016 Click-to-Run affected versions not specified Microsoft Office Excel affected versions not specified Description: The issue is related to how objects are handled in memory, which can lead to remote code execution. This is...

CVE-2018-0851: Out-of-bounds Write

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...

CVE-2018-0853: Improper Initialization

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability"...

Microsoft Office 2016 Click-to-Run Remote Code Execution Vulnerability

Microsoft Office 2016 Click-to-Run is an office software suite product developed by Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Office 2016 Click-to-Run that stems from the program failing to properly handle objects in memory. A remote attacker can exploit...

Kotlin-based malicious apps penetrate Google market

An open-source programming language, Kotlin is a fully-supported official programming language for Android. Google boasts that Kotlin contains safety features in order to make apps "healthy by default." Many apps are already built with Kotlin, from the hottest startups to Fortune 500 companies...

Microsoft Excel CVE-2018-0841 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Office CVE-2018-0853 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...

PT-2018-1062

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Microsoft Office 2016 Click-to-Run C2R Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. The vulnerability exists due to how t...

PT-2018-9106

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2007 through 2016 Microsoft Office 2016 Click-to-Run Description: The issue arises from insufficient validation of incoming message formats. An attacker could exploit this to force Outlook to load a local or remote...

click-watch.com XSS vulnerability

Open Bug Bounty ID: OBB-552126 Description| Value ---|--- Affected Website:| click-watch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

perfume-click.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-551544 Description| Value ---|--- Affected Website:| perfume-click.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-1516

IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

CVE-2017-1516

IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

PT-2018-5784 · Ibm · Ibm Doors Web Access

Name of the Vulnerable Software and Affected Versions: IBM Doors Web Access versions 9.5 through 9.6 Description: The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this to hijack th...

CVE-2017-1516: Improper Input Validation

IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

4 Malicious Chrome Extensions Put 500k Users at Risk of Click Fraud

By Waqas Presence of spyware and malware in Chrome browser extensions we use This is a post from HackRead.com Read the original post: 4 Malicious Chrome Extensions Put 500k Users at Risk of Click Fraud...