RCE via CSRF in osCmax

High-Tech Bridge Security Research Lab discovered 2 PHP Local File Inclusion vulnerabilities in osCmax, a popular web-based e-commerce application and shopping cart. The vulnerabilities can be exploited to execute arbitrary PHP code on the target system. Successful exploitation of these...

WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability

WordPress PDF and Print plugin version 1.7.4 suffers from a cross site scripting vulnerability. WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability Plugin Name : PDF & Print Effected Version : 1.7.4 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS...

Foxit Reader/PhantomPDF Memory Misreference Vulnerability

Foxit PhantomPDF is a practical PDF solution. A memory misreference vulnerability exists in Print object and App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2. A remote attacker can execute arbitrary code using a constructed PDF document...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

DEBIAN-CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

EUVD-2015-8211

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

WordPress PDF And Print 1.7.4 Cross Site Scripting

Plugin Name : PDF & Print Effected Version : 1.7.4 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

KLA10724 Code execution vulnerability in Foxit products

Multiple use-after-free vulnerabilities were found in Foxit products. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed PDF document. Technical details Vulnerabilities related to Print method an...

Debian DSA-3419-1 : cups-filters - security update

Adam Chester discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

The vulnerability of the HP Access Control system allows a perpetrator to gain access to protected information.

The vulnerability of the Secure Pull Print and Security Pull Print components of the HP Access Control printing management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

UBUNTU-CVE-2015-8560

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; semicolon character in a print job, a different vulnerability than CVE-2015-8327...

Debian: Security Advisory (DSA-3419-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Foxit PhantomPDF Print Memory Misreference Vulnerability

Foxit PhantomPDF is a practical PDF solution. Foxit PhantomPDF has a memory misreference vulnerability in the handling of the Print method, which constructs a PDF document that can force a suspended pointer that has been freed to be reused. An attacker exploiting this vulnerability could execute...

UBUNTU-CVE-2015-8436

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

Mageia: Security Advisory (MGASA-2015-0465)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Foxit PhantomPDF Print Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Debian DSA-3411-1 : cups-filters - security update

Michal Kowalczyk discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. The oldstable distribution wheezy is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 3411-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3411-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2015 https://www.debian.org/security/faq -...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...