pari/gp 2.x Arbitrary File Overwrite

pari/gp on debian stable allow arbitrary file write pari/gp is CAS computer algebra system. pari/gp version 2.9.1 on debian stretch and 2.11 on debian buster allow arbitrary file write and hence arbitrary code execution. poc: ======== \ a.gp \ to run: \r a.gp...

Windows Defender Firewall: Private Profile: Apply local firewall rules

The policy determines whether the local firewall rules are merged with GP settings when connected to a private network. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...

Windows Defender Firewall: Domain Profile: Apply local firewall rules

The policy determines whether the local firewall rules are merged with GP settings when connected to a domain network. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...

Windows Defender Firewall: Private Profile: Apply local connection security rules

The policy determines whether the local connection rules are merged with GP settings when connected to a private network. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of t...

Schneider Electric Proface GP-Pro EX Detection

Detection for Schneider Proface GP-Pro EX Software. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Schneider Electric Pro-face GP-Pro EX

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Pro-face GP-Pro EX Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to modify code to...

CVE-2018-7832

An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched...

Input validation

An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched...

CVE-2018-7832

An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched...

CVE-2018-7832

CVE-2018-7832 affects Pro-face GP-Pro EX, specifically Version 4.08 and earlier. The vulnerability stems from improper input validation, which could allow launching an arbitrary executable when GP-Pro EX is started. The ICS advisory confirms the affected product and version range and notes the ve...

CVE-2018-19965

Technical details about CVE-2018-19965 (Xen) are not provided in the connected documents. The initial description lacks vendor/product/version/root-cause/fix specifics. Monitor for updates from Xen advisories.

gp-collection.com XSS vulnerability

Open Bug Bounty ID: OBB-639175 Description| Value ---|--- Affected Website:| gp-collection.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial of Service Vulnerability in Shooter Video Processing of 3GP Video Files

Shooter Video is a player, 3GP is a common video format, commonly used in mobile devices. A denial-of-service vulnerability exists in Shooter Video's handling of 3GP video files. An attacker can cause the program to crash by constructing a malformed 3GP file, which can lead to arbitrary code...

Memory Corruption Vulnerability in Storm Video 5 PC Client

Storm Video 5 is a video player from Beijing Storm Technology Co. Storm Video 5 PC client when opening specific 3gp files = A memory corruption vulnerability exists, which can be exploited by attackers to cause a denial of service...

Sohu Video 5 PC Client Has Denial of Service Vulnerability

Sohu Video 5 is a video player from Sohu. A denial of service vulnerability exists in Sohu Video Player when parsing certain 3gp files, which can be exploited by attackers to cause a denial of service attack...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

Schneider Electric Pro-face GP-Pro EX (software) version 4.07.000 is affected by CVE-2017-9961: an Uncontrolled Search Path Element vulnerability (CWE-427) that can force a process to load an arbitrary DLL and execute code in the current process context. Exploitation is local (not remote) and req...

gp-reifen.com XSS vulnerability

Vulnerable URL: https://www.gp-reifen.com/?site=search=43=%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E1000=1420 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4084746 VIP websit...