Local Code Execution Vulnerability in Multiple Panda Security Products

Panda Security Panda Global Protection and others are antivirus products from the Spanish company Panda Security. The products protect all devices from viruses, spyware, hackers and other Internet threats. A local code execution vulnerability exists in several Panda Security products. A local...

SOFTWIN Bitdefender Antivirus Local Code Execution Vulnerability

SOFTWIN BitDefender Antivirus is a suite of antivirus programs from the Romanian company SOFTWIN. A local code execution vulnerability exists in SOFTWIN Bitdefender Antivirus, which can be exploited by a local attacker to cause a denial of service by executing arbitrary code within an affected...

Qihu 360 Total Security 2016 Local Code Execution Vulnerability

Qihu 360 Total Security 2016 is a suite of free antivirus software from China's Qihu 360 Qihu 360 released to overseas markets. A local code execution vulnerability exists in the Qihu 360 Total Security 2016 version, which can be exploited by a local attacker to execute arbitrary code in an...

JetBrains PyCharm Professional Local Code Execution Vulnerability

JetBrains PyCharm a.k.a. python ide is a set of Python development tools from the Czech company JetBrains. professional is one of the professional versions. A local code execution vulnerability exists in JetBrains PyCharm Professional. A local attacker could exploit this vulnerability to execute...

Notepad++ Native Code Execution Vulnerability

Notepad++ is a free plain text editor developed by software developer Don Ho, which can be used to create plain text help files and is also suitable for use as an editor for writing computer programs. A local code execution vulnerability exists in Notepad++. A local attacker could exploit this...

The vulnerability of the Adobe Photoshop graphic editor, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Adobe Photoshop graphic editor arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure memory corruption...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

Microsoft Windows DNS Server Memory Misreference Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory misreference vulnerability exists in the Microsoft Windows DNS server, which arises from a failure of the program to properly process a request. An attacker is allowed to exploit the...

UBUNTU-CVE-2015-5723

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local...

CVE-2015-5723: Undefined Security Weakness

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local...

PT-2016-1978

Name of the Vulnerable Software and Affected Versions Adobe Reader versions affected versions not specified Adobe Acrobat versions affected versions not specified Description The issue is related to the use of an insecure search path in Adobe Reader and Adobe Acrobat. This could allow a local...

The vulnerability of the Integrated Architecture Builder software, a tool for creating control systems, allows a hacker to execute arbitrary code.

The vulnerability of the IAB.exe component of the Integrated Architecture Builder software, which is used for creating control systems, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to execute arbitrary code using a...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780: Undefined Security Weakness

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

Red Hat redhat-support-plugin-rhev local code execution vulnerability

Red Hat redhat-support-plugin-rhev is a technology preview feature that seamlessly integrates access to Red Hat Subscription Services from the Red Hat Enterprise Virtualization Management Portal. A security vulnerability in Red Hat redhat-support-plugin-rhev allows local attackers to exploit the...

FTPShell Client 5.24 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: ================================ www.ftpshell.com Product: ================================ FTPShell Client version 5.24 FTPShell client is a...

FTPShell Client 5.24 - Local Buffer Overflow

FTPShell Client 5.24 - Local Buffer Overflow ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: ================================ www.ftpshell.com Product: ================================...

KiTTY Portable 0.65.1.1p - Local Saved Session Overflow (Egghunter XP / Denial of Service 7/8.1/10)

Exploit Title: KiTTY Portable Local Code Execution Win7 - Denial Of Service Win8.1 - Denial Of Service Win10 - Denial Of Service Instructions: ------------- - Ru...

glibc: data corruption while reading the NSS files database

It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or corrupt the heap depending on adjacent heap contents. A local attacker could potentially use this flaw to execute arbitrary code on the system...

Debian: Security Advisory (DSA-3369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...