3195 matches found
Description of the security update for PowerPoint Viewer 2010: September 12, 2017
Description of the security update for PowerPoint Viewer 2010: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the Security Only update for the .NET Framework 2.0 SP2 for Windows Server 2008 SP2: September 12, 2017
Description of the Security Only update for the .NET Framework 2.0 SP2 for Windows Server 2008 SP2: September 12, 2017 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework that could allow remote code execution when...
Description of the security update for Excel 2007: September 12, 2017
Description of the security update for Excel 2007: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Publisher 2010: September 12, 2017
Description of the security update for Publisher 2010: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...
Description of the security update for 2007 Microsoft Office Suite: September 12, 2017
None None...
Description of the security update for Outlook 2010: September 12, 2017
Description of the security update for Outlook 2010: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, y...
CVE-2017-3133
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...
CVE-2017-3133
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
RubyGems < 2.6.13 - Arbitrary File Overwrite
There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/where to the field, an attacker can create an arbitrary file out of the directory of the gem, or even replace an existing file with a malicious file. Proof of Concept 1: Create a fil...
RubyGems 2.6.13 - Arbitrary File Overwrite
RubyGems 2.6.13 - Arbitrary File Overwrite There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/where to the field, an attacker can create an arbitrary file out of the directory of the gem, or even replace an existing file with a...
Hacking a Phone Through a Replacement Touchscreen
Researchers demonstrated a really clever hack: they hid malware in a replacement smart phone screen. The idea is that you would naively bring your smart phone in for repair, and the repair shop would install this malicious screen without your knowledge. The malware is hidden in touchscreen...
Beware – Smartphones Can Be Hacked With Malicious Replacement Parts
By Waqas IT security researchers at Israel based the Ben-Gurion University of This is a post from HackRead.com Read the original post: Beware Smartphones Can Be Hacked With Malicious Replacement Parts...
Lack of signature authentication vulnerability in some Huawei apps
Some Huawei APPs are vulnerable to lack of signature verification. Since some Huawei APPs do not support APK file signature verification. Attackers can use this vulnerability to hijack and replace APK files. Successful exploitation can lead to APP hijacking...
[SECURITY] Fedora 26 Update: subversion-1.9.7-1.fc26
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...
Description of the security update for SharePoint Server 2010: August 8, 2017
Description of the security update for SharePoint Server 2010: August 8, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
KB4019086 - Description of the security update for SQL Server 2016 RTM CU: August 8, 2017
KB4019086 - Description of the security update for SQL Server 2016 RTM CU: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow access to an...
KB4019092 - Description of the security update for SQL Server 2012 Service Pack 3 GDR: August 8, 2017
KB4019092 - Description of the security update for SQL Server 2012 Service Pack 3 GDR: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acce...
Fedora 25 : qt5-qtwebkit (2017-c844713925)
Qt5WebKit update to the new, maintained 'annulen branch'. Drop-in replacement for the old unmaintained QtWebKit. ---- Update to annulen-branch of qt5-qtwebkit, which contains a lot of security fixes. Drop-in replacement for the old unmaintained qt5-qtwebkit Note that Tenable Network Security has...
tomcat: system property disclosure
It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...