Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to improper data processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Greenhouse.io: Content Spoofing on link.greenhouse.io

Hi, Description: Content spoofing, also referred to as content injection or virtual defacement, is an attack targeting a user made possible by an injection vulnerability in a web application. When an application does not properly handle user supplied data, an attacker can supply content to a web...

PT-2017-2911 · Geutebruck · G-Cam/Efd-2250

Name of the Vulnerable Software and Affected Versions: Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12 Description: The issue is related to the improper neutralization of special elements in the logic of data requests, which can allow a remote attacker to gain access to the operating system...

MGASA-2017-0043 Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Vulnerabilities in the Android operating system that allow a hacker to cause the device to freeze or restart

The multiple vulnerabilities in libmedia and libstagefright of Android operating system’s media servers are related to improper data processing. Exploiting these vulnerabilities can allow a malicious actor to cause the device to freeze or restart remotely...

Out-of-bounds

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead to a...

DSA-3749-1 dcmtk - security update

Bulletin has no description...

CVE-2016-7876

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

Memory corruption

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7876

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7876

CVE-2016-7876 affects Adobe Flash Player up to version 23.0.0.207 (Windows/macOS) and 11.2.202.644 (Adobe built-in Flash); the issue is a memory corruption in the Clipboard handling code which could enable arbitrary code execution. Mitigations/patches: multiple advisories note fixes in Flash Play...

Delta Industrial Automation WPLSoft LAD File Reading Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7876

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

KLA10895 Denial of service vulnerability in RealNetworks RealPlayer

An improper data handling was found in RealNetworks RealPlayer. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed .QCP file. NB: This vulnerability have no public CVSS rating so rating can be changed...

The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.

The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...

ImageMagick 'coders/rle.c' heap buffer overflow vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick due to ImageMagick failing to adequately define user input...

The vulnerability of the Windows operating system, which allows a hacker to redirect network traffic

The vulnerability of the Web Proxy Auto Discovery protocol in the Windows operating system is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to redirect network traffic remotely...