ZKTime Web Software 2.0 - Improper Access Restrictions

Exploit Title: ZKTime Web Software 2.0 - Broken Authentication CVE-ID: CVE-2017-14680 Vendor Homepage: https://www.zkteco.com/product/ZKTimeWeb2.0435.html Vendor of Product: ZKTeco Affected Product Code: ZKTime Web - 2.0.1.12280 Category: WebApps Author: Arvind V. Author Social: @FindArvind...

ZKTime Web Software 2.0 - Improper Access Restrictions

ZKTime Web Software 2.0 - Improper Access Restrictions Exploit Title: ZKTime Web Software 2.0 - Broken Authentication CVE-ID: CVE-2017-14680 Vendor Homepage: https://www.zkteco.com/product/ZKTimeWeb2.0435.html Vendor of Product: ZKTeco Affected Product Code: ZKTime Web - 2.0.1.12280 Category:...

KLA10992 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitary code and possibly cause a denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities in the XML Forms...

podofo integer overflow vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . An integer overflow vulnerability exists in PoDoFo version 0.9.4, which stems from the program's failure to adequately perform boundary checks on user-submitted data. An attacker could exploit this vulnerability to caus...

Foxit Reader < 7.3.4 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An unauthenticated, remote attacker can exploit this, via a crafted PDF...

Scuolabook purchased e-books on .pdf format Download Exploit

This script allows you to download 'scuolabook.it' purchased ebooks via-webapp and save them on .pdf format and read/edit with every pdf-editor Usage Info 1 Login to your account on scuolabook.it; 2 Copy 'turnersession' session key; 3 Run exploit python exploit.py; 4 Follow the on-screen...

Page2Flip 2.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-028 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Cross-Site Scripting...

Page2Flip 2.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-027 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Cross-Site Scripting...

Foxit Reader GIF Conversion Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of G...

Foxit Reader TIFF Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

Threat Outbreak Alert RuleID11898: Email Messages Distributing Malicious Software on October 9, 2014

Medium Alert ID: 36026 First Published: 2014 October 9 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11898 may contain the following files: Name |...

Pyew - A Python tool for static malware analysis

Pyew is a command line python tool to analyse malware. It does have support for hexadecimal viewing, disassembly Intel 16, 32 and 64 bits, PE and ELF file formats it performs code analysis and let you write scripts using an API to perform many types of analysis, follows direct call/jmp instructio...

[Pyew v2.2] A Python tool for static malware analysis

Pyew is a command line python tool to analyse malware. It does have support for hexadecimal viewing, disassembly Intel 16, 32 and 64 bits, PE and ELF file formats it performs code analysis and let you write scripts using an API to perform many types of analysis, follows direct call/jmp instructio...

Fedora Update for glpi-pdf FEDORA-2012-10661

Check for the Version of glpi-pdf OpenVAS Vulnerability Test Fedora Update for glpi-pdf FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

mPDF <= 5.3 file disclosure and fix-vulnerability warning-the black bar safety net

Title: mPDF = 5.3 File Disclosure Author: ZadYree Download address: http://www.mpdf1.com/mpdf/download Affected versions: 5.3 and prior Test platform: multiple !/ usr/bin/perl-U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2 SYNOPSIS -- examples/showcode.php --...

mPDF <= 5.3 File Disclosure

Exploit for php platform in category web applications Exploit Title: mPDF = 5.3 File Disclosure Google Dork: Please no dork Date: 16th December 2011 Author: ZadYree Software Link: http://www.mpdf1.com/mpdf/download Version: 5.3 and prior Tested on: Multiple CVE : N/A !/usr/bin/perl -U =head1 TITL...

mPDF 5.3 File Disclosure

Exploit Title: mPDF = 5.3 File Disclosure Google Dork: Please no dork Date: 16th December 2011 Author: ZadYree Software Link: http://www.mpdf1.com/mpdf/download Version: 5.3 and prior Tested on: Multiple CVE : N/A !/usr/bin/perl -U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2...

mPDF 5.3 - File Disclosure

mPDF 5.3 - File Disclosure Exploit Title: mPDF 1; use c...

[SECURITY] Fedora 14 Update: glpi-pdf-0.7.2-1.fc14

This GLPI plugin enables you to print, in pdf format, the information sheet of an equipment or a software of the inventory...