Opendocman HTML Injection Vulnerability

OpenDocMan is a versatile Web-based document management system DMS written in PHP and designed to follow the ISO 17025/IEC standard. OpenDocMan suffers from an HTML injection vulnerability due to the setting of filters to filter user input. An attacker may perform elevation of privilege or...

Threat Outbreak Alert RuleID22066: Email Messages Distributing Malicious Software on April 3, 2016

Medium Alert ID: 44475 First Published: 2016 April 4 13:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22066 may contain the following files: Name | Siz...

Debian DSA-3530-1 : tomcat6 - security update

Multiple security vulnerabilities have been fixed in the Tomcat servlet and JSP engine, which may result on bypass of security manager restrictions, information disclosure, denial of service or session fixation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

resin-doc 会议管理系统任意文件读取漏洞

http://../resin-doc/resource/tutorial/jndi-appconfig/test?inputFile= inputFile参数可任意文件读取 google搜一下还可以搜到很多 比如:...

GLSA-201603-05 : LibreOffice, OpenOffice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-05 LibreOffice, OpenOffice: Multiple vulnerabilities Multiple vulnerabilities were found in both LibreOffice and OpenOffice that allow the remote execution of arbitrary code and potential Denial of Service. These...

Threat Outbreak Alert RuleID21370: Email Messages Distributing Malicious Software on February 25, 2016

Medium Alert ID: 43774 First Published: 2016 February 25 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21370 may contain the following files: Name |...

Threat Outbreak Alert RuleID21162: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43625 First Published: 2016 February 19 18:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21162 may contain the following files: Name |...

Threat Outbreak Alert RuleID20951: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43425 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20951 may contain the following files: Name |...

WPS Office 2016 - .doc OneTableDocumentStream Memory Corruption

WPS Office 2016 - .doc OneTableDocumentStream Memory Corruption Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WP...

Stack overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6015, and...

CVE-2015-6014

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6015, and...

PT-2016-1242

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology affected versions not specified Description The issue is caused by a stack-based buffer overflow in the Oracle Outside In Technology component of the Oracle Fusion Middleware platform. It can be exploited by a remo...

Threat Outbreak Alert RuleID20606: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43139 First Published: 2016 January 21 19:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20606 may contain the following files: Name |...

Threat Outbreak Alert RuleID20446: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43135 First Published: 2016 January 21 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20446 may contain the following files: Name |...

CVE-2016-0932

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2016-0932: Undefined Security Weakness

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

Adobe Acrobat Reader DC Doc Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2016-1035

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue is related to a use-after-free vulnerability in the implementation of the Doc object in Adobe PDF viewer and editor applications...

Threat Outbreak Alert RuleID20188: Email Messages Distributing Malicious Software on December 18, 2015

Medium Alert ID: 42780 First Published: 2015 December 21 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20188 may contain the following files: Name |...

RedHat Update for libreoffice RHSA-2015:2619-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...