Exiv2 Buffer Overflow Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in the getData of the...

UBUNTU-CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

EasyService Billing 1.0 - SQL Injection / Cross-Site Scripting

Exploit Title: EasyService Billing 1.0 - 'template.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Version: 1.0...

EasyService Billing 1.0 - SQL Injection Cross-Site Scripting

EasyService Billing 1.0 - SQL Injection Cross-Site Scripting Exploit Title: EasyService Billing 1.0 - 'template.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

ProfileGrid – User Profiles, Groups and Communities <= 2.8.5 - Authenticated Code Execution

The plugin ProfileGrid – User Profiles, Groups and Communities versions prior to 2.8.6 is vulnerable to Arbitrary Code Execution. An authenticated user with a role as low as Subscriber can execute arbitrary PHP code on websites using the plugin. Send an authenticated POST request to...

Synology Drive Attachment Preview Cross-Site Scripting Vulnerability

Synology Drive is a collaboration suite from Synology that includes document management, collaboration and file synchronization and backup features.Attachment Preview is one of the attachment preview plug-ins. A cross-site scripting vulnerability exists in Attachment Preview in Synology Drive...

Synology Note Station Attachment Preview Cross-Site Scripting Vulnerability

Synology Note Station is a cloud-based note management platform from Synology, and Attachment Preview is one of the attachment preview feature components. A cross-site scripting vulnerability exists in Attachment Preview in Synology Note Station 2.5.1-0844 and prior versions. A remote attacker ca...

CVE-2018-8910

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8910

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8910

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8910

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8910

CVE-2018-8910 is a cross-site scripting (XSS) vulnerability in Synology Drive’s Attachment Preview prior to 1.0.1-10253. An authenticated remote user can inject arbitrary web script or HTML via a malicious attachment. The publicly documented details indicate network access with low attack complex...

PT-2018-18709 · Synology · Synology Drive

Name of the Vulnerable Software and Affected Versions: Synology Drive versions prior to 1.0.1-10253 Description: The issue is related to a cross-site scripting XSS vulnerability in the Attachment Preview feature. This allows remote authenticated users to inject arbitrary web script or HTML via...

CVE-2018-8910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8911

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8911

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

Cross site scripting

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

Microsoft Adds Support for JavaScript in Excel—What Could Possibly Go Wrong?

Shortly after Microsoft announced support for custom JavaScript functions in Excel, someone demonstrated what could possibly go wrong if this feature is abused for malicious purposes. As promised last year at Microsoft's Ignite 2017 conference, the company has now brought custom JavaScript...

CVE-2018-8911

Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

PT-2018-18710

Name of the Vulnerable Software and Affected Versions Synology Note Station versions prior to 2.5.1-0844 Description A cross-site scripting XSS issue exists in the Attachment Preview feature of Synology Note Station, allowing remote authenticated users to inject arbitrary web script or HTML via...