The vulnerability in the `mozilla::a11y::DocAccessible::PutChildrenBack` function of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a attacker to trigger a service failure.

The vulnerability of the mozilla::a11y::DocAccessible::PutChildrenBack function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client arises due to an operation that goes beyond the buffer boundaries in memory when working with ARIA Accessible Rich Internet Applications attributes usi...

rich-birds.com XSS vulnerability

Open Bug Bounty ID: OBB-553855 Description| Value ---|--- Affected Website:| rich-birds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rich FileManager 2.7.0 Cross Site Scripting

============================================================================================================================ | Title : Rich FileManager v2.7.0 xss via file uploads Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro | | | Vend...

CVE-2018-6217

The WStr::allociostrdata function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service application crash via a crafted a web page, b office document, or c .rtf file...

Kingsoft WPS Office Denial of Service Vulnerability

Kingsoft WPS Office is an office software suite from the Chinese company Kingsoft, commonly used components include Writer word processing, Spreadsheets spreadsheets and Presentation presentations. A security vulnerability exists in the 'WStr::allociostrdata' function of the kso.dll file in...

CVE-2018-0797

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability"...

CVE-2017-2707

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

Privilege escalation

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

Debian: Security Advisory (DSA-4005-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2017-7818

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications ARIA elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox 56, Firefox ESR 52.4, and Thunderbird 52.4...

DEBIAN-CVE-2017-14926

In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References - Bugs.freedesktop....

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References -...

UBUNTU-CVE-2017-14926

In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document...

UBUNTU-CVE-2017-14928

In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document...

FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY

FireEye recently detected a malicious Microsoft Office RTF document that leveraged CVE-2017-8759, a SOAP WSDL parser code injection vulnerability. This vulnerability allows a malicious actor to inject arbitrary code during the parsing of SOAP WSDL definition contents. FireEye analyzed a Microsoft...

Linux PDF rendering engine poppler Annot.cc Null pointer reference vulnerability in AnnotRichMedia::Configuration::Configuration()

Poppler is used to generate a PDF of the C++ class library , from xpdf inheritance. Linux PDF rendering engine poppler Annot.cc AnnotRichMedia::Configuration::Configuration there is a null pointer reference vulnerability. An attacker could cause a denial of service attack when processing a...

Linux PDF rendering engine poppler Annot.cc AnnotRichMedia::Content::Content() has a null pointer reference vulnerability

Poppler is used to generate a PDF of the C++ class library , from xpdf inheritance. Linux PDF rendering engine poppler Annot.cc AnnotRichMedia::Content::Content there is a null pointer reference vulnerability. An attacker could cause a denial of service attack when processing a malicious PDF file...

USB Safely Remove 5.5.5 Denial Of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: USB Safely Remove 5.5.5 - Denial of Service Date of Discovery: August 31 2017 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Crystal Rich Ltd. Vendor Homepage:...

USB Safely Remove 5.5.5 Denial Of Service

!/usr/bin/python Exploit Title: USB Safely Remove 5.5.5 - Denial of Service Date of Discovery: August 31 2017 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Crystal Rich Ltd. Vendor Homepage: https://safelyremove.com Software Link:...