PT-2018-10048

Name of the Vulnerable Software and Affected Versions MyBB version 1.8.15 Description The issue concerns the mishandling of 'target=" blank" rel="noopener"' in A elements by MyBB 1.8.15 when accessed with Microsoft Edge. This makes it easier for remote attackers to conduct redirection attacks...

Mozilla Firefox Heap Memory Misreference Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory misreference vulnerability exists in mozilla::WebGLContext::DrawElementsInstanced in Mozilla Firefox during WebGL operations. An attacker could exploit this vulnerability to cause a...

Multiple vulnerabilities in the CLI analyzer of the Cisco IOS XE operating system, allowing attackers to execute arbitrary commands

The multiple vulnerabilities of the Cisco IOS XE operating system’s CLI analyzer are related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting these vulnerabilities can allow attackers to gain access to the device’s Linux shell and...

The vulnerability of the software-hardware platform for access control in Linear E3 eMerge arises from the improper neutralization of special elements used in the command line. This allows a intruder to elevate their privileges and execute arbitrary code.

The vulnerability of the software-hardware platform for access control in Linear E3 eMerge is related to the improper neutralization of special elements used in the command sequence. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

CVE-2018-10297: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

PT-2018-9807

Name of the Vulnerable Software and Affected Versions: Discuz! versions prior to X3.4 Description: The issue is related to stored XSS via the "portal.php?mod=portalcp&ac=article" API endpoint, specifically due to mishandling of IMG elements associated with remote images. Recommendations: For...

Foxit Reader XFA field Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of fiel...

PT-2018-19132

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-19116

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-19118

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-19133

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-19102

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.0.29935 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2018-19100

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.0.29935 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

Foxit Reader XFA Button boundItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA boundItem...

Foxit Reader XFA Button resolveNodes Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNode...

Microsoft Edge CSS Custom Property Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the Media Streaming add-on, which handles the transmission of multimedia files, arises from the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the Media Streaming add-on relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands with root privileges remotely...

CVE-2018-10193

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

CVE-2018-10193

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

CVE-2018-10193: Uncontrolled Resource Consumption

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...