osTicket 1.9.12 XSS / File Upload / Access Bypass / Session Fixation

============================================= - Release date: February 04th, 2016 - Discovered by: Giovanni Cerrato and Enrico Cinquini - Severity: High ============================================= I. VULNERABILITY ------------------------- osTicket multiple vulnerabilities. II. INTRODUCTION...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

Wikileak's Julian Assange Could Be Set Free On Friday by United Nation

The decision of the United Nations investigation into the Julian Assange case is set to be revealed and could order the release of Wikileaks founder on February 5. "BREAKING: UN set to announce decision on Assange's release on Friday,"BREAKING: UN set to announce decision on Assange's release on...

BlackEnergy APT Group Spreading Malware via Tainted Word Docs

Attackers have begun using rigged Microsoft Word documents propagated via spearphishing emails to spread the BlackEnergy Trojan. Researchers with Kaspersky Lab’s Global Research and Analysis Team discovered a malicious Word document last week that appears to stem from a campaign against one of th...

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, is caused by buffer overflow. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially...

The vulnerability of the Microsoft Office suite, specifically the Word Viewer program for reading doc files, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office suite, including the Word Viewer program for reading DOC files, stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a multi-level PDF document...

USN-2875-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00267)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00264)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00262)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00266)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00263)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00265)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-00240)

Microsoft Office is an office software suite based on the Windows operating system. Microsoft Office suffers from a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code by constructing special Office documents...

Adobe Reader Memory Error Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability when handling malformed ExtGState dictionaries within PDF documents. It can lead to a double release. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Microsoft Edge TextData Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit PhantomPDF is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-08389)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A cross-site scripting vulnerability exists in versions of Google Chrome prior to 47.0.2526.80. It allows remote attackers to inject arbitrary web script or HTML crafted documents via crafted documents...