The vulnerability of the ReadPSDChannelZip function in the ImageMagick console graphics editor’s coders/psd.c component allows a hacker to cause a service failure due to an infinite loop.

The vulnerability of the ReadPSDChannelZip function in the ImageMagick console graphics editor’s coders/psd.c component is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created PSD image...

Mail.ru: Stored XSS on top.mail.ru

Stored XSS via incorrect handling of http page headers on top.mail.ru at created counters...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in scannerliteraliscreated in js-scanner-util.c:2510 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

CVE-2021-31554

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked...

MediaWiki AbuseFilter extension 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.2 and prior versions, which stems from account...

GHSA-9295-MHF3-V33M Insecure temporary file in Netflix OSS Hollow

ID: NFLX-2021-001 Title: Local information disclosure in Hollow Release Date: 2021-03-23 Credit: Security Researcher @JLLeitschuh Overview Security researcher @JLLeitschuh reported that Netflix Hollow a Netflix OSS project available here: https://github.com/Netflix/hollow writes to a local...

CVE-2021-28099

In Netflix OSS Hollow, since the Files.existsparent is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated...

Netflix Hollow 安全特征问题漏洞

Netflix Hollow is a Java library and toolset from Netflix, Inc. for propagating in-memory datasets from a single producer to many consumers for high-performance read-only access. Netflix Hollow suffers from a security vulnerability that can be exploited by an attacker to pre-create directories wi...

The vulnerability of the InstallService component for Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the InstallService component for Windows operating systems is related to privilege management errors. Exploiting this vulnerability could allow an attacker to enhance their privileges through a specially created application...

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...

Workspace App 1912.1000 - Workspace App Update removes user created shortcuts from Desktop

Consider the following scenario: Users have created shortcuts of published applications manually on their Desktop and have also pinned it to the task bar. When the Receiver is upgraded from 4.9.6001 to Workspace App for Windows 1912 or 2006, on the first launch of a published app, the shortcuts...

The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

The vulnerability of the Windows Speech Shell component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Shell component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created application...

The vulnerability of the Windows Diagnostics Execution Service in the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the Windows Diagnostics Execution Service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...