625 matches found
Notepad++: No SearchEngine sanatizing can lead to command injection
Information: Summary: Notepad++ is vulnerable to a command injection vulnerability. Debug Info: Notepad++ v7.6.3 32-bit Build time : Jan 27 2019 - 17:20:30 Path : C:\Program Files x86\Notepad++\notepad++.exe Admin mode : ON Local Conf mode : OFF OS : Windows 10 64-bit Plugins : none Description:...
Notepad++: Insufficient sanitizing can lead to arbitrary commands execution
Information: Summary: Notepad++ is vulnerable to a command injection attack. Debug Info: Notepad++ v7.6.3 32-bit Build time : Jan 27 2019 - 17:20:30 Path : C:\Program Files x86\Notepad++\notepad++.exe Admin mode : ON Local Conf mode : OFF OS : Windows 10 64-bit Plugins : none Description: Let's...
Notepad++: Security check failure or stack buffer overrun (crash)
poc.py 1 Run poc.py 2 Open notepad++.exe 3 Go to "Define language..." 4 Use tab "Comment and Number" 5 Open 1stfield.txt and copy content to clipboard 6 Paste clipboard on "Comment line style in field Open" 7 Open 2ndfield.txt and copy content to clipboard 8 Paste clipboard on "Comment line style...
Notepad++: Stack overflow affecting "ext" field on stylers.xml configuration file
Summary: A stack buffer overflow vulnerability affects "ext" field into "stylers.xml" configuration file. "isInList" function doesn't check boundaries on word64 array. Description: Vulnerability src file: notepad-plus-plus/PowerEditor/src/MISC/Common/Common.cpp Vulnerability line: line 329 Variab...
Notepad++: Stack overflow in XML Parsing
Summary: A stack buffer overflow vulnerability has been detected in XML parsing functionality on Notepad++. That's due to the fact that invisibleEditView.getText function doesn't check buffer boundaries. Description: Vulnerability src file: notepad-plus-plus/PowerEditor/src/Notepadplus.cpp...
Zenmap (Nmap) 7.70 Denial Of Service
Exploit Title: Nmap 7.70 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-10 Software Link: https://nmap.org/dist/nmap-7.70-setup.exe Tested Version: 7.70 ZenMap Tested on OS: Windows 7 32bit Description: This vunerability causes the program to crash and start to...
notepad-plus-plus.org XSS vulnerability
Open Bug Bounty ID: OBB-633166 Description| Value ---|--- Affected Website:| notepad-plus-plus.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Oracle PeopleSoft Products PeopleSoft Enterprise HCM Shared Components Component Unauthorized Operation Vulnerability
Oracle PeopleSoft is an enterprise human capital management solution from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM Shared Components is one of the Human Capital Management HCM shared components. PeopleSof...
Notepad++ Portable Detection (Windows SMB Login)
SMB login and WMI file search based detection of Notepad++ Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-2878
Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products subcomponent: Notepad. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2018-2878
CVE-2018-2878 affects Oracle PeopleSoft Enterprise HCM Shared Components, Notepad subcomponent, in PeopleSoft 9.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the HCM Shared Components, with successful attacks enabling unauthorized update/insert...
Jupyter Notebook JavaScript Malicious Fake File Vulnerability
Jupyter Notebook is a suite of open source web applications for creating and sharing code and illustrative text documents. A security vulnerability exists in Jupyter Notebook versions prior to 5.4.1. An attacker can exploit this vulnerability to execute JavaScript code in a notepad context with t...
iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service Exploit
Exploit for iOS platform in category dos / poc Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ -------------------------...
iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service
Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ ------------------------- CVE-2017-13849 TpwnT by Ro of SavSec...
notepad-plus-plus.org XSS vulnerability
Open Bug Bounty ID: OBB-385810 Description| Value ---|--- Affected Website:| notepad-plus-plus.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
How to obtain expiration date of the "Distribution Provisioning Profile (.MOBILEPROVISION)" file of an iOS (.iPA) application
What is the "Distribution Provisioning Profile .MOBILEPROVISION" File used by Apple Xcode, a software developmentIDEoften used for creating iPhone apps; contains a provisioning profile, which allows an app to be uploaded to a limited number of iPhones or iPads while it is still in development. Yo...
Notepad++ Hex Editor Plugin BOF Vulnerability (Aug 2017)
Notepad++ is prone to a buffer overflow BOF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Notepad++ Buffer Overflow Vulnerability (CNVD-2017-13995)
Notepad++ is a free plain text editor developed by software developer Don Ho. It can be used to create plain text help files, and is also suitable for use as an editor for writing computer programs.Hex Editor Plugin is an editor used in... A buffer overflow vulnerability exists in Notepad++. An...
CVE-2017-8803
Notepad++ 7.3.3 32-bit with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues...
CVE-2017-8803
Notepad++ 7.3.3 32-bit with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues...