CVE-2018-1000628

Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp function. By adding "" to the end of "key" in the URL when accessing API functions...

Foxit Quick PDF Library Stack Buffer Overflow Vulnerability

Foxit Quick PDF Library is China's Foxit Foxit Software Corporation, a PDF SDK Software Development Kit. The product is mainly used to create, render and edit PDF documents. Foxit Quick PDF Library in the 'LoadFromFile', 'LoadFromString' and 'LoadFromStream ' functions in PDF Library contain a...

The vulnerability of the identification management service of the Cisco Digital Network Architecture (DNA) Center allows a perpetrator to bypass the authentication process and gain control over identification management functions.

The vulnerability of the identification management service of the Cisco Digital Network Architecture DNA Center is related to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain...

Microsoft Excel Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...

RCE in PHP or how to bypass disable_functions in PHP installations

Today we will explore an exciting method to remotely execute code even if an administrator set disablefunctions in the PHP configuration file. It works at most popular UNIX-like systems. CVE-2018–19518 was assigned to the vulnerability was found by a man with the @crlf nickname. Let’s see details...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to an issue with capturing the name of a function expression in one of the param scope functions where the name symbols are not added to the body. This allows a remote attacker to execute arbitrary code in the context of the...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due a use-after-free UAF bug in Parse.cpp when an asynchronous arrow functions are used, which would allow a remote attacker to leave a bogus reference to the async identifier and execute arbitrary code in the context of the...

PT-2018-15030

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue allows for Server Side Request Forgery SSRF via a "what=importurl&url=" request with an http or https URL to the "admin/functions/remote.php" endpoint. This also enables...

CVE-2018-13321

Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter...

CVE-2018-19559

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

CuppaCMS SQL Injection Vulnerability

CuppaCMS is a content management system CMS. A SQL injection vulnerability exists in the administrator/classes/ajax/functions.php file in CuppaCMS 2018-11-12 and earlier versions. A remote attacker can exploit the vulnerability to execute SQL commands with the help of 'referenceid' parameter...

CVE-2018-13321: Incorrect Permission Assignment for Critical Resource

Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter...

PT-2018-11745

Name of the Vulnerable Software and Affected Versions Buffalo TS5600D1206 version 3.61-0.10 Description The issue is related to incorrect access controls in the nasapi, allowing attackers to call internal functions. This can be achieved by manipulating the method parameter. Recommendations For...

The Rotexy mobile Trojan – banker and ransomware

On the back of a surge in Trojan activity, we decided to carry out an in-depth analysis and track the evolution of some other popular malware families besides Asacub. One of the most interesting and active specimens to date was a mobile Trojan from the Rotexy family. In a three-month period from...

GHSA-RXMR-C9JM-7MM8 Exposure of Sensitive Information to an Unauthorized Actor in Apache hive

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs xpath/xpathstring/xpathboolean/xpathnumber/xpathdouble/xpathfloat/xpathlong/xpathint/xpathshort to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user usually hive if...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

Code injection

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension e.g., the test or test.asdf filename, because of admin/upload-uploadify.php, and validatesafefile in...

CVE-2018-19420

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension e.g., the test or test.asdf filename, because of admin/upload-uploadify.php, and validatesafefile in...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

CVE-2018-19404

In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&url=...