26146 matches found
Reflected XSS when renaming malicious file (NC-SA-2021-005)
Missing sanitization in Nextcloud Server 20.0.5 and prior allowed to perform a reflected XSS when saving html as file name and causing an error on rename e.g. by renaming to an existing file. The risk is mostly mitigated due to the strict Content-Security-Policy CSP of Nextcloud, and thus mainly...
January 12, 2021—KB4598297 (Security-only update)
None None...
Local Elevation of Privilege Vulnerability in System Explorer v7.0.0
System Explorer is a free system resource management tool. A local elevation of privilege vulnerability exists in System Explorer v7.0.0, which can be exploited by an attacker to gain control of a server...
10-Strike Network Inventory Explorer Pro 9.05 Buffer Overflow
Exploit Title: 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow SEH Date: 2020-12-22 Exploit Author: Florian Gassner Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-pro-setup.exe Version: 9.05 Tested on...
Security Bulletin: Public disclosed vulnerabilities from codemirror affect IBM Spectrum LSF Explorer
Summary Public disclosed vulnerabilities from codemirror affect IBM Spectrum LSF Explorer. IBM Spectrum LSF Explorer has addressed these vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...
10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH) Exploit
Exploit Title: 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow SEH Exploit Author: Florian Gassner Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-pro-setup.exe Version: 9.05 Tested on: Windows 10 x64...
10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)
Exploit Title: 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow SEH Date: 2020-12-22 Exploit Author: Florian Gassner Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-pro-setup.exe Version: 9.05 Tested on...
Exploit for Type Confusion in Microsoft
https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-ex...
Exploit for Out-of-bounds Write in Microsoft
PoC exploit for CVE-2019-1221 Lost the orig...
System Explorer 7.0.0 - (SystemExplorerHelpService) Unquoted Service Path Vulnerability
Exploit Title: System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path Exploit Author: Mohammed Alshehri Vendor Homepage: http://systemexplorer.net/ Software Link: http://systemexplorer.net/download/SystemExplorerSetup.exe Version: Version 7.0.0 Tested on: Microsoft Windows 10...
System Explorer 7.0.0 Unquoted Service Path
Exploit Title: System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path Date: 2020-10-14 Exploit Author: Mohammed Alshehri Vendor Homepage: http://systemexplorer.net/ Software Link: http://systemexplorer.net/download/SystemExplorerSetup.exe Version: Version 7.0.0 Tested on:...
System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path
Exploit Title: System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path Date: 2020-10-14 Exploit Author: Mohammed Alshehri Vendor Homepage: http://systemexplorer.net/ Software Link: http://systemexplorer.net/download/SystemExplorerSetup.exe Version: Version 7.0.0 Tested on:...
December 8, 2020—KB4592495 (Security-only update)
None None...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2020-14579, CVE-2020-14578, CVE-2020-14577, CVE-2020-14621)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVEs. Vulnerability Details CVEID:...
10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH) Exploit
Exploit Title: 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow SEH Exploit Author: Sectechs Vendor Homepage: https://www.10-strike.com Version: 8.65 Tested on: Windows 7 x86 SP1 import os import sys import struct import socket crash ="A" 209 jmp short 8 kali@root:msf-nasmshell nasm jm...
10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)
Exploit Title: 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow SEH Date: 2020-09-02 Exploit Author: Sectechs Vendor Homepage: https://www.10-strike.com Version: 8.65 Tested on: Windows 7 x86 SP1 import os import sys import struct import socket crash ="A" 209 jmp short 8...
Digitally Signed Bandook Malware Once Again Targets Multiple Sectors
A cyberespionage group with suspected ties to the Kazakh and Lebanese governments has unleashed a new wave of attacks against a multitude of industries with a retooled version of a 13-year-old backdoor Trojan. Check Point Research called out hackers affiliated with a group named Dark Caracal in a...
Published application launches twice when application clicked only once
When launching a published application through Internet Explorer, the published application starts twice when the application was clicked only once. The first instance will be successful and then wfshell calls another instance of the application...
The vulnerability of the Scripting Engine component in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Scripting Engine component in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...