5006 matches found
PowerWare Ransomware Masquerades as Locky to Intimidate Victims
A new variant of the PowerWare ransomware is stealing street creds from the Locky strain of ransomware in an attempt to spoof the malware family. A new sample of PowerWare found by Palo Alto Networks’ Unit 42 reveals the ransomware’s quickly evolving tactics. According to researchers, a new versi...
libxml2 DoS File Read
The vulnerability of the xmlSAX2ResolveEntity and xmlSetExternalEntityLoader functions in the libxml2 library is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures or read arbitrary files using a specially crafted XML...
Microsoft Outlook Arbitrary Code Execution Vulnerability
Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. An arbitrary code execution vulnerability exists in Microsoft Outlook. A remote attacker can exploit this vulnerability to execute arbitrary...
Microsoft Word Viewer Arbitrary Code Execution Vulnerability
Microsoft Word Viewer is a set of free Office Word document viewer from Microsoft USA. An arbitrary code execution vulnerability exists in Microsoft Word Viewer. A remote attacker can exploit this vulnerability to execute arbitrary code via specially crafted Office documents...
[SECURITY] Fedora 23 Update: pdfbox-1.8.8-6.fc23
Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...
Office Web Apps Code Execution
The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Office applications, the Office Web Apps Server web server, the Word For Mac text editor, the Microsoft Word text editor, the Microsoft SharePoint Server enterprise application...
Microsoft Office Compatibility Pack Code Execution
The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...
Microsoft Office Compatibility Pack Code Execution
The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...
Microsoft Office Code Execution
The vulnerability of the Microsoft Office suite is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...
Offline Digital Forensics Tool for Binary Files: ByteForce
Offline Digital Forensics Tool for Binary Files Offline Digital Forensics Tool for Binary Files This tool can be used for offline digital forensics and malware analysis as it shows all raw bytes of a file and also the ASCII representations. As you can see from the screenshots, It can be used on a...
Foxit Reader Compromise Information Disclosure
Cross-site execution of stored scripts in Foxit Reader when reading and displaying file names and their paths in the “Recent Documents” section on the initial page allows attackers to replace registry entries and force the application to download malicious files...
Adobe Reader Data Compromise
The vulnerability in Adobe Reader allows attackers to bypass the security mechanisms of PDF documents...
Firefox Code Execution
The Mozilla Firefox browser contains a vulnerability related to the implementation of the cairotruetypeindextoucs4 function in the Cairo class. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely, using a specially crafted extension that processes fonts in PDF...
Mozilla SeaMonkey Code Execution
Mozilla SeaMonkey’s email client contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely, using a specially crafted extension that...
Microsoft Word Code Execution
Microsoft Word’s text editor contains a vulnerability in its file format converter, which occurs when converting documents to binary format. With a specially created .doc file, a malicious individual can cause the application to malfunction or execute arbitrary code...
Microsoft Office Code Execution
A vulnerability in Microsoft Office software, related to errors in checking the path of dynamically loaded libraries. Exploiting this vulnerability allows a malicious attacker to execute arbitrary code contained in the dynamic library located in the document’s open directory...
Word Viewer Information Disclosure
The vulnerability in the Word Viewer, a component of the Microsoft SharePoint Server corporate application suite, as well as the Microsoft Office Web Apps and Microsoft Office Compatibility Pack, affects text editors like Microsoft Word. These vulnerabilities stem from a lack of protection for...
[SECURITY] Fedora 24 Update: xerces-c-3.1.4-1.fc24
Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0...
Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)
The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...
jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags
It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...