Stacks - Critical - Arbitrary PHP code execution - SA-CONTRIB-2018-001

This module enables content editors to create complex pages and layouts on the fly without the help from a developer, using reusable widgets. The module does not sufficiently filter values posted to its AJAX endpoint, which leads to the instantiation of an arbitrary PHP class. This vulnerability ...

OneThird CMS vulnerable to directory traversal

Overview OneThird CMS provided by SpiQe Software is a Contents Management System CMS. OneThird CMS contains a directory traversal vulnerability CWE-22. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

CVE-2017-14198

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution RCE via a maliciously crafted timeformat tag...

The First Threatpost Alumni Podcast

With Mike Mimoso leaving Threatpost, it was high time to get many of the people responsible for the site’s success throughout the years together for a podcast. Founding editors Ryan Naraine and Dennis Fisher along with Mike, Chris Brook, Brian Donohue and Christen Gentile are aboard for a memorab...

TYPO3 Information Disclosure Vulnerability (CNVD-2017-31808)

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. TYPO3 suffers from an information disclosure vulnerability. Because the program fails to properly check user permissions on file storage, an editor could obtain information about...

Vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader, Foxit Reader, Adobe Reader Document Cloud, allowing attackers to execute arbitrary code.

The vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader and Foxit Reader arises due to an operation going beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to...

The vulnerability in the XFA event-management system allows attackers to execute arbitrary code. This vulnerability affects programs for editing PDF files such as Adobe Acrobat Document Cloud and Adobe Acrobat, as well as programs for viewing PDF files like Adobe Reader and Adobe Reader Document Cloud.

The vulnerability of XFA event management and PDF editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewer programs like Adobe Reader, Adobe Reader Document Cloud is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious act...

The Windows Malware Analysis Distribution: flare-vm

FLARE VM is a freely available and open sourced Windows-based security distribution designed for reverse engineers, malware analysts, incident responders, forensicators, and penetration testers. Inspired by open-source Linux-based security distributions like Kali Linux, REMnux and others, FLARE V...

Unauthorized Workspace Modification

typo3/neos is vulnerable to unauthorized workspace modification. Remote editors can access, create and modify content nodes in other editor's workspaces...

The vulnerability of JPEG decoders in PDF editing and viewing software such as Adobe Acrobat, Adobe Reader, Document Cloud, Adobe Acrobat Document Cloud, and Adobe Reader allows attackers to execute arbitrary code.

The vulnerability of JPEG decoders in PDF file editing and viewing applications from Adobe Acrobat, Adobe Reader, Document Cloud, and Adobe Acrobat Document Cloud arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to execut...

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code...

[SECURITY] Fedora 26 Update: gst-editing-services-1.12.0-1.fc26

This is a high-level library for facilitating the creation of audio/video non-linear editors...

The vulnerabilities in programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to breach the confidentiality of information.

The vulnerability of image conversion tools for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, is related to reading beyond the buffer limit and memory leaks caused by parsing EMF format files. Exploiting this...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of image conversion modules used for viewing and editing PDF files in Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of the image conversion component in programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to the execution of operations outside the buffer in memory. Exploiting this...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of CCITT programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of the image conversion tool for viewing and editing PDF files, including Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation going beyond the buffer in memory as a result of parsing JPEG files. Exploiting this...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability in the architecture of XML Form Architecture XFA programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is related to the use of memory after it is freed. Exploiting this vulnerability can...

WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting

WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting Exploit Title: Authorized Stored XSS at WordPress Corner-Ad plugin. Google Dork: inurl:/wp-content/plugins/corner-ad Date: 16-02-17 Exploit Author: Atik Rahman Vendor Homepage: https://wordpress.org/plugins/corner-ad/ Software Link:...

WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting

Exploit Title: Authorized Stored XSS at WordPress Corner-Ad plugin. Google Dork: inurl:/wp-content/plugins/corner-ad Date: 16-02-17 Exploit Author: Atik Rahman Vendor Homepage: https://wordpress.org/plugins/corner-ad/ Software Link: https://downloads.wordpress.org/plugin/corner-ad.zip Version:...