PT-2019-7395 · WordPress · Dynamic Widgets

Name of the Vulnerable Software and Affected Versions: dynamic-widgets plugin versions prior to 1.5.11 Description: The issue concerns a cross-site scripting XSS problem. It can be exploited via the "action=term tree" prefix or the widget id parameter in the "/wp-admin/admin-ajax.php" API endpoin...

Flare-Emu - Powered by IDA Pro and the Unicorn emulation framework that provides scriptable emulation features for the x86, x86_64, ARM, and ARM64 architectures to reverse engineers

flare-emu marries IDA Pro’s binary analysis capabilities with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible and robust emulator for its supported...

Total Defense Anti-virus Code Issue Vulnerability

Total Defense Anti-virus is a suite of antivirus software from the American company Total Defense. Total Defense Anti-virus has a code issue vulnerability. An attacker can exploit this vulnerability to hijack the ccGUIFrm.dll file and execute code...

Dell Update Package Framework Code Issue Vulnerability

Dell Update Package DUP Framework is a framework for updating system components from Dell USA. The product primarily provides installers for drivers, applications, BIOS, and firmware. A code issue vulnerability exists in the Dell DUP Framework file, which can be exploited by a local attacker to...

CVE-2019-13356

In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\bd\TDUpdate2\ used by AMRT.exe allows local attackers to hijack bdcore.dll, which leads to privilege escalation when the AMRT service loads the DLL...

Cool Edit has a dll hijacking vulnerability

cool edit pro is a multitrack recording and audio processing software developed by Syntrillium Software. Cool Edit suffers from a dll hijacking vulnerability that can be exploited by attackers to gain server privileges...

Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, which arises because Presentations X9 suffers from a dll hijacking vulnerability when processing files such as wpg. An attacker can exploit the vulnerability to lo...

Corel Motion Studio 3D suffers from a dll hijacking vulnerability

Corel Motion Studio 3D is a 3D film and animation creation software from Corel. Corel Motion Studio 3D suffers from a dll hijacking vulnerability when processing c3d files. An attacker can load a malicious dll and execute malicious code...

Corel WordPerfect Office Presentations has a dll hijacking vulnerability ( CNVD-2019-36844)

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, Presentations X9 suffers from a dll hijacking vulnerability when working with documents such as docs. An attacker can exploit the vulnerability to load a malicious...

WordPress sitebuilder-dynamic-components plugin injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sitebuilder-dynamic-components is a plugin for inserting dynamic content into static pages. An injection vulnerability exists in the...

XnView suffers from dll hijacking vulnerability

XnView is an image viewing software. XnView suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

[SECURITY] Fedora 31 Update: bird-2.0.6-1.fc31

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol BGPv4, Routing Information Protocol RIPv2, RIPng, Open Shortest Path First protocol OSPFv2, OSPFv3, Babel Routing Protocol Babe l, Bidirectional Forwarding Detection BFD, IPv6 router advertisements, static...

Fedora Update for dhcp FEDORA-2019-d04f66e595

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for bind-dyndb-ldap FEDORA-2019-d04f66e595

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: dhcp-4.3.6-34.fc29

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 29 Update: bind-dyndb-ldap-11.1-19.fc29

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

The vulnerability of the executable file FortiClientOnlineInstaller.exe of the Fortinet FortiClient for Windows security device allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiClientOnlineInstaller.exe executable component of the Fortinet FortiClient for Windows security device is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created DLL file...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

Adobe Application Manager unsafe library loading (dll hijacking) vulnerability

Adobe Application Manager AAM is an application for managing Adobe products from the American company Audobee Adobe. The program is mainly used to manage the installation of Adobe products, updates and so on. Adobe Application Manager suffers from an insecure library loading DLL hijacking...