Microsoft Office Information Disclosure Vulnerability (CNVD-2016-07925)

Microsoft Office is a suite of office software products developed by Microsoft.Visual Basic macros is one of the programming languages dedicated to performing common automation OLE tasks in desktop applications. An information disclosure vulnerability exists in Visual Basic macros in Microsoft...

CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Code injection

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Microsoft Edge TextNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw relates to how Edge handles tex...

Microsoft Edge CTreePos Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw relates to how Edge handles tex...

CVE-2016-3363

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than...

CVE-2016-3359

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-3358

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013...

Adobe Digital Editions Remote Code Execution Vulnerability

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07530)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07529)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07527)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

Adobe ColdFusion < 11 Update 10 - XML external entity injection

Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - APSB16-30 - Release date: 31.08.2016 I. VULNERABILITY Adobe ColdFusion = 11 XML External Entity XXE Injection II. BACKGROUND "Adobe ColdFusion 11 Enterprise Edition offers a single platform to rapidly build and...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

Adobe ColdFusion 11 Update 10 - XML External Entity Injection

Adobe ColdFusion 11 Update 10 - XML External Entity Injection ''' ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-4264 - APSB16-30 - Release date: 31.08.2016 - Severity: Critical...

Legal Robot: News Feed Detected

RSS Really Simple Syndication and related formats are methods for publishing regularly updated web content. RSS feeds are XML documents that are made available for client downloads and are often included with content managament systems, such as blogs. https://www.legalrobot.com/rss.xml...

pdf to doc converter handle pdf file memory corruption vulnerability

pdf to doc converter is a PDF conversion software. The software suffers from a memory corruption vulnerability in the handling of PDF files that allows an attacker to crash the program by constructing malformed PDF files...

Hancitor Malware Shifts Infection Strategies

Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest push of the Hancitor family of malware since June that it says has...