Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

Adobe ColdFusion < 11 Update 10 - XML external entity injection

Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - APSB16-30 - Release date: 31.08.2016 I. VULNERABILITY Adobe ColdFusion = 11 XML External Entity XXE Injection II. BACKGROUND "Adobe ColdFusion 11 Enterprise Edition offers a single platform to rapidly build and...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

Adobe ColdFusion 11 Update 10 - XML External Entity Injection

Adobe ColdFusion 11 Update 10 - XML External Entity Injection ''' ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-4264 - APSB16-30 - Release date: 31.08.2016 - Severity: Critical...

Legal Robot: News Feed Detected

RSS Really Simple Syndication and related formats are methods for publishing regularly updated web content. RSS feeds are XML documents that are made available for client downloads and are often included with content managament systems, such as blogs. https://www.legalrobot.com/rss.xml...

pdf to doc converter handle pdf file memory corruption vulnerability

pdf to doc converter is a PDF conversion software. The software suffers from a memory corruption vulnerability in the handling of PDF files that allows an attacker to crash the program by constructing malformed PDF files...

Hancitor Malware Shifts Infection Strategies

Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest push of the Hancitor family of malware since June that it says has...

The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer are caused by buffer overflow attacks. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially crafted Office document from a remote...

Threat Outbreak Alert RuleID24259: Email Messages Distributing Malicious Software on August 12, 2016

Medium Alert ID: 48465 First Published: 2016 August 12 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24259 may contain the following files: Name |...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06269)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06271)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

SOL48448204 - PHP vulnerability CVE-2016-6207

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

PowerWare Ransomware Masquerades as Locky to Intimidate Victims

A new variant of the PowerWare ransomware is stealing street creds from the Locky strain of ransomware in an attempt to spoof the malware family. A new sample of PowerWare found by Palo Alto Networks’ Unit 42 reveals the ransomware’s quickly evolving tactics. According to researchers, a new versi...

The vulnerability of the libxml2 library allows a attacker to trigger a service failure or read arbitrary files.

The vulnerability of the xmlSAX2ResolveEntity and xmlSetExternalEntityLoader functions in the libxml2 library is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures or read arbitrary files using a specially crafted XML...

Microsoft Outlook Arbitrary Code Execution Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. An arbitrary code execution vulnerability exists in Microsoft Outlook. A remote attacker can exploit this vulnerability to execute arbitrary...

Microsoft Word Viewer Arbitrary Code Execution Vulnerability

Microsoft Word Viewer is a set of free Office Word document viewer from Microsoft USA. An arbitrary code execution vulnerability exists in Microsoft Word Viewer. A remote attacker can exploit this vulnerability to execute arbitrary code via specially crafted Office documents...

[SECURITY] Fedora 23 Update: pdfbox-1.8.8-6.fc23

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

Vulnerability of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack package, the Microsoft Office applications package, the Office Web Apps Server web server, the Word For Mac text editor, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application package, the Office Online Server web server, allowing a perpetrator to execute arbitrary code

The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Office applications, the Office Web Apps Server web server, the Word For Mac text editor, the Microsoft Word text editor, the Microsoft SharePoint Server enterprise application...

The vulnerability of the Microsoft Office Compatibility Pack allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...