Stored Cross-Site Scripting Vulnerability in Graphite Document Personal and Enterprise Editions

Graphite Document is an enterprise office service software that supports real-time collaboration in the cloud with features analogous to Google Docs and Quip, which enables multiple people to edit and discuss in real time on the same document and form at the same time, with a synchronized respons...

SaltStack Salt Master Server Root Key Disclosure

This module exploits unauthenticated access to the prepauthinfo method in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to disclose the root key used to authenticate administrative commands to the master. VMware vRealize Operations...

Foxit PDF Editor Personal Edition Installer has a dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. There is a dll hijacking vulnerability in t...

Foxit PDF Editor Personal Edition Dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. Foxit PDF Editor Personal Edition has a Dll...

Elevation of Privilege Vulnerability in Micropoint Baihui Intelligent Defense Software Personal Edition

Micropoint Baihui Beijing Information Security Technology Co., Ltd. is mainly engaged in the research, development, production and sales of network information security products. There is an elevation of privilege vulnerability in the Personal Edition of Micropoint Baihui Intelligent Defense...

CVE-2019-7690

In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the lifetime of the process, even after the user disconnects from the remote SSH server. This affects Passwordless Authentication that has a Password Protected SSH...

Code Execution Vulnerability in Yongzhong Office Personal Edition for Windows

Yongzhong Software Co., Ltd. is a basic office software developer and service provider. With Yongzhong Office as the core, the company provides a wide range of products and solutions such as desktop office, mobile office, cloud office and document conversion services. A code execution vulnerabili...

KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...

Denial of Service Vulnerability in Micropoint Active Defense Personal Edition

Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...

MobaXterm Personal Edition 10.2 Directory Traversal

!/usr/bin/perl Exploit Title: MobaXterm Personal Edition / 10.2 FTP File Disclosure - allow users to browse outside root directory - allow anonymous connections - without username and password The solution is not to allow users to browse outside root directory and anonymous connections Exploit...

CVE-2017-6805

Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...

MobaXterm Personal Edition Directory Traversal Vulnerability

MobaXterm Professional Edition is a terminal software.MobaXterm allows you to start remote sessions.Each session you start is automatically saved and displayed in the left sidebar. MobaXterm Personal Edition suffers from a directory traversal vulnerability that stems from a failure to adequately...

BrewBlogger 2.3.2 - Multiple Vulnerabilities

BrewBlogger 2.3.2 - Multiple Vulnerabilities BrewBlogger 2.3.2 multiple security vulnerabilities Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23BrewBlogger2.3.2multiplesecurityvulnerabilities/ Software: BrewBlogger Version: 2.3.2 Club Edition and Persona...

Core Security Technologies Advisory 2008.0624

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

CVE-2008-2003

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

Remote code execution

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

CVE-2008-2003

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...