WordPress woocommerce-pdf-invoices-packing-slips plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. woocommerce-pdf-invoices-packing-slips plugin is used in one of the invoices sent for e-commerce plugin. A cross-site...

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

CVE-2017-18506

CVE-2017-18506 affects the WordPress plugin woocommerce-pdf-invoices-packing-slips (before 2.0.13). The vulnerability is an XSS flaw triggered via the tab or section variable on the plugin’s settings screens. Public documentation consistently identifies this as a client-side script execution risk...

UBUNTU-CVE-2019-1789

ClamAV versions prior to 0.101.2 are susceptible to a denial of service DoS vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking...

Security update for obs-service-tar_scm (important)

openSUSE Security Update: Security update for obs-service-tarscm Announcement ID: openSUSE-SU-2019:0326-1 Rating: important References: 1076410 1082696 1105361 1107507 1107944 Cross-References: CVE-2018-12473 CVE-2018-12474 CVE-2018-12476 Affected Products: openSUSE Leap 15.0 An update that solve...

SIMDComp Buffer Overflow Vulnerability

SIMDComp is a C library that uses binary packing to compress a list of certificates. A security vulnerability exists in SIMDComp versions prior to 0.1.0. A remote attacker could exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read and application crash...

Shopify: H1514 Lack of access control on edit packing slip template

Summary: An admin is able to edit the Edit packing slip template at /admin/settings/packingsliptemplate. However, a staff user with only "Home" permission and none other can view and also make edits to this template. Description: The Edit packing slip feature exists so an admin user can customize...

WordPress WooCommerce PDF Invoices & Packing Slips plugin <=2.0.12 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Detectify in WordPress WooCommerce PDF Invoices & Packing Slips plugin versions =2.0.12. Solution Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version at least 2.0.13...

Threat Outbreak Alert RuleID30637: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55318 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30637 may contain the following files: Name ...

Threat Outbreak Alert RuleID30447: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55099 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30447 may contain the following files: Name |...

Woocommerce PDF Invoices Packing Slips < 2.0.13 - XSS

The WooCommerce PDF Invoices & Packing Slips WordPress plugin was affected by a XSS security vulnerability...

Threat Outbreak Alert RuleID25321: Email Messages Distributing Malicious Software on October 21, 2016

Medium Alert ID: 49387 First Published: 2016 October 21 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25321 may contain the following files: Name |...

Threat Outbreak Alert RuleID25298: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49205 First Published: 2016 October 6 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25298 may contain the following files: Name |...

Threat Outbreak Alert RuleID24881: Email Messages Distributing Malicious Software on September 7, 2016

Medium Alert ID: 48799 First Published: 2016 September 7 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24881 may contain the following files: Name |...

Adobe Flash - ATF Image Packing Overflow

Adobe Flash - ATF Image Packing Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Adobe Flash - ATF Image Packing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Adobe Flash - ATF Image Packing Overflow

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Automatically Extracting Obfuscated Strings from Malware using the FireEye Labs Obfuscated String Solver (FLOSS)

Introduction and Motivation Have you ever run strings.exe on a malware executable and its output provided you with IP addresses, file names, registry keys, and other indicators of compromise IOCs? Great! No need to run further analysis or hire expensive experts to determine if a file is malicious...