libreoffice: Multiple out-of-bounds overflows in lwp filter

Multiple flaws were found in the Lotus Word Pro LWP document format parser in LibreOffice. By tricking a user into opening a specially crafted LWP document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file...

ASP Gateway 1.0.0 Database Disclosure

======================================================================== | Title : ASP Gateway 1.0.0 Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 1.0.0 | Vendor :...

ABT Blog 2.0 Database Disclosure

======================================================================== | Title : ABT Blog v2.0 Blog Scripti Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.0 | Vendor :...

Cgiemail 1.6 Source Code Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/env perl Exploit Title: cgiemail local file inclusion Vendor Homepage: http://web.mit.edu/wwwdev/cgiemail/webmaster.html Software Link: http://web.mit.edu/wwwdev/cgiemail/cgiemail-1.6.tar.gz Version: 1.6 and older Date: 2016-09-27...

Redkod 3.0 Database Disclosure

======================================================================== | Title : Redkod v3.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v3.0 | Vendor :...

MyDesign Haber Scripti 7 Database Disclosure

======================================================================== | Title : MyDesign v7 Haber Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v7 | Vendor :...

Yasir Portal 5.0 Portal Scripti Database Disclosure

======================================================================== | Title : Yasir Portal v5.0 Portal Scripti Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v5.0 | Vendor :...

PC Toplama 2.0 Database Disclosure

======================================================================== | Title : PC Toplama v2.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.0 | Vendor :...

Cgiemail 1.6 - Source Code Disclosure

Cgiemail 1.6 - Source Code Disclosure !/usr/bin/env perl Exploit Title: cgiemail local file inclusion Vendor Homepage: http://web.mit.edu/wwwdev/cgiemail/webmaster.html Software Link: http://web.mit.edu/wwwdev/cgiemail/cgiemail-1.6.tar.gz Version: 1.6 and older Date: 2016-09-27 cgiecho a script...

Cgiemail 1.6 - Source Code Disclosure

!/usr/bin/env perl Exploit Title: cgiemail local file inclusion Vendor Homepage: http://web.mit.edu/wwwdev/cgiemail/webmaster.html Software Link: http://web.mit.edu/wwwdev/cgiemail/cgiemail-1.6.tar.gz Version: 1.6 and older Date: 2016-09-27 cgiecho a script included with cgiemail will return any...

ZineBasic 1.1 Remote File Disclosure

Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

ZineBasic 1.1 - Arbitrary File Disclosure Exploit

Exploit for php platform in category web applications Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

Updated libreoffice packages fix security vulnerabilities

Updated libreoffice packages fix security vulnerabilities: The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document CVE-2016-0794. LibreOffice before 5.0.5...

True Weather LWP Free - Base64 encoded String, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application True Weather LWP Free published at the 'play' market has multiple vulnerabilities...

Time Battle Next 3D Theme LWP - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Time Battle Next 3D Theme LWP published at the 'play' market has multiple vulnerabilities...

DOG LICKS SCREEN LWP FREE - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application DOG LICKS SCREEN LWP FREE published at the 'play' market has multiple vulnerabilities...

Galaxy S5 Smart LWP - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy S5 Smart LWP published at the 'play' market has multiple vulnerabilities...

LibreOffice < 5.0.5 Multiple RCE

The version of LibreOffice installed on the remote Windows host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

[SECURITY] [DSA 3482-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3482-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 17, 2016 https://www.debian.org/security/faq -...