Apache CouchDB 2.0.0 Local Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE-COUCHDB-LOCAL-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open...

Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID: ====================================...

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ===============...

libchewing: Heap-buffer-overflow in ueStrNBytes

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6274152528871424 Target: libchewing Fuzzer: libFuzzerlibchewingchewingrandominitfuzzer Fuzzer binary: chewingrandominitfuzzer Job Type: libfuzzerasanlibchewing Platform Id:...

libass: Heap-buffer-overflow in parse_tag

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4693221439438848 Target: libass Fuzzer: libFuzzerlibassfuzzer Fuzzer binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

EditMe CMS - Cross-Site Request Forgery Add Admin Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory...

libarchive: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4591448766808064 Target: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzzer binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

Insecure Unserialize and SQL Injection in extension "Code Highlighter" (mh_code_highlighter)

It has been discovered that the extension "Code Highlighter" mhcodehighlighter is susceptible to Insecure Unserialize and SQL Injection. Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: versio...

file: Heap-buffer-overflow in mcopy

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6349141718335488 Target: file Fuzzer: libFuzzerfilemagicfuzzer Fuzzer binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Adobe Connect & Desktop v9.5.6 - Persistent Vulnerability

Document Title: =============== Adobe Connect & Desktop v9.5.6 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1838 Security ID: PSIRT-5180 Bulletin: https://helpx.adobe.com/security/products/connect/apsb16-35.html Vulnerabilit...

Adobe Connect 9.5.7 - Cross-Site Scripting

Document Title: =============== Adobe Connect & Desktop v9.5.7 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1838 Security ID: PSIRT-5180 Bulletin: https://helpx.adobe.com/security/products/connect/apsb16-35.html...

Axessh 4.2 - Denial of Service

Axessh 4.2 - Denial of Service + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AXESSH-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.labf.com Product: ============= Axessh 4.2.2 Axessh is a SSH client...

Axessh 4.2 - Denial of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AXESSH-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.labf.com Product: ============= Axessh 4.2.2 Axessh is a SSH client. It is a superb terminal...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

pcre2: Heap-buffer-overflow in read_repeat_counts

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6615370005741568 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000180 Crash State:...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

Hewlett Packard TouchSmart Calendar Service 4.1.4245 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

libchewing: Heap-buffer-overflow in ueStrNBytes

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5606046517166080 Fuzzer: libFuzzerchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

Binary data 9687.pasl...

iWisoft Video Converter 1.2 DLL Hijacking

i?Document Title: =============== iWisoft Video Converter 1.2 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-04 Vulnerability Disclosure Timeline: ================================== 2016-10-04 : Discovery of the Vulnerability 2016-10-04 : Contact the Vendor No Response 2016-10-...