VisiWave VWR File Parsing (CVE-2011-2386)

A remote code execution vulnerability exists in VisiWave's Site Survey Report. The vulnerability is caused by a failure to validate a user controlled property. A remote attacker can exploit this vulnerability by using a malicious property, potentially causing arbitrary code to be injected and...

file: incomplete fix for CVE-2012-1571 in cdf_read_property_info

It was found that the fix for CVE-2012-1571 was incomplete; the File Information fileinfo extension did not correctly parse certain Composite Document Format CDF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file...

HackerOne: Window Opener Property Bug

The bug mentioned in 23386 is not yet correctly patched I believe. See, if a user sets his/her profile's website link to a similar page as mentioned in 23386. I mean a page that can manipulate the window.opener property would be able to accomplish similar results as in 23386 Proof-of-Concept: 1...

Cross site scripting

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

Google Chrome 36.0 XSS Auditor Bypass

Vulnerability: Google Chrome 36.0 XSS Auditor Bypass Impact: Moderate Authors: Rafay Baloch Company: RHAInfoSec Website: http://rhainfosec.com version: Latest Description Google chrome XSS auditor was found prone to a bypass when the user input passed though location.hash was being written to the...

[SECURITY] Fedora 20 Update: libplist-1.11-2.fc20

libplist is a library for manipulating Apple Binary and XML Property Lists...

UBUNTU-CVE-2014-3587

Integer overflow in the cdfreadpropertyinfo function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service application crash via a crafted CDF file. NOTE: this vulnerability exists becaus...

Community Health Systems APT Data Breach Medical Espionage

At first blush, the Community Health Systems data breach by Chinese hackers seems to be an anomaly. State-sponsored attackers generally target intellectual property for the purposes of military or economic gain; stealing healthcare credentials and personal patient records seems incongruous. But...

Monitoring of vSphere 4.x fails with Veeam MP v7

Challenge Though everything is configured correctly and you have successfully added vCenter 4.x or standalone ESX 4.x to Veeam Extensions as a Monitoring target, no data is shown in SCOM and you can see "Veeam VMware Collector: VMware connection is unavailable" alerts . Additionally, the followin...

Heap overflow

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

CVE-2014-3459

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

Breaking - Edward Snowden Get 3 More Years In Russia

The individual responsible for one of the most significant leaks in US political history is Edward Snowden, a 31-year-old global surveillance whistleblower and former U.S. intelligence contractor, who has received a three- year residence permit from Russia, his lawyer announced on Today. “On the...

Group Documents 1.2.1 - Document Property Manipulation CSRF

The BP Group Documents WordPress plugin was affected by a Document Property Manipulation CSRF security vulnerability...

WP Property <= 1.38.3.2 - Non-administrative User XMLI Remote Information Disclosure

The WP-Property – WordPress Powered Real Estate and Property Management WordPress plugin was affected by a Non-administrative User XMLI Remote Information Disclosure security vulnerability...

WP Property <= 1.35.0 - Arbitrary File Upload

The WP-Property – WordPress Powered Real Estate and Property Management WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

CVE-2014-4203

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing...

CVE-2014-4203

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing...

CVE-2014-4203: Undefined Security Weakness

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing...

PT-2014-5733

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects confidentiality, integrity, and availability. It is related to Property Editing in the Hyperion Enterprise Performance Management Architect component...