1022 matches found
CVE-2018-8065
An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...
CVE-2018-7583
Proxy.exe in DualDesk 20 allows Remote Denial Of Service daemon crash via a long string to TCP port 5500...
IrfanView 4.44 SEH Buffer Overflow
!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.44 Email PlugIn - Local Buffer Overflow SEH Date: 02-07-2018 Vulnerable Software: IrfanView 4.44 Email PlugIn Vendor Homepage: http://www.irfanview.com/ Version: 4.44 Software Link:...
Threat Outbreak Alert RuleID31976: Email Messages Distributing Malicious Software on February 22, 2018
Medium Alert ID: 56913 First Published: 2018 February 22 17:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31976 may contain the following files: Name |...
CVE-2018-1161
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart reques...
WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2018-03654)
WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...
Polaris office 2017 suffers from a denial of service vulnerability (CNVD-2018-02908)
Polaris Office is an office software developed by INFRAWARE, a South Korean company. You can view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides and other commonly used office documents. A denial of service vulnerability exists in the Polaris office 2017 executable...
Automatize Obfuscation and Generation of MS Office Documents: macro_pack
The macropack is a tool used to automatize obfuscation and generation of MS Office documents for pentest, demo, and social engineering assessments. The goal of macropack is to simplify antimalware solutions bypass and automatize the process from vba generation to final Office document generation...
Microsoft Office - Dynamic Data Exchange 'DDE' Payload Delivery (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Office DDE Payload Delivery', 'Description' = %q This module generates an DDE command to place within a word document, that when...
Microsoft Office DDE Payload Delivery Exploit
This Metasploit module generates an DDE command to place within a word document, that when executed, will retrieve a HTA payload via HTTP from an web server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
Amazon Audible Software DLL Load Local Elevation of Privilege Vulnerability
Amazon Audible for Windows is a Windows-based audiobook application from Amazon.com. A security vulnerability exists in the ActiveSetupN.exe file in Amazon Audible for Windows-based platforms. An attacker can exploit the vulnerability to execute arbitrary DLL code...
DEBIAN-CVE-2017-17052
The mminit function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the -exefile member of a new process's mmstruct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program...
PortEx - Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS Header, COFF File Header,...
CVE-2017-16757
Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...
CVE-2017-15651
PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message...
CVE-2017-15651
PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message...
Denial of Service Vulnerability in WPS Forms
WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in the xlsxrw module of formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...
Null Pointer Vulnerability in WPS Forms
WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer vulnerability exists in the form et.exe in WPS when parsing a specific xls file etmain, which can be exploited by an attacker to cause a denial of service or code execution...
Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34138)
WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the excelrw module of formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...