Cross site scripting

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...

CVE-2017-16749

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

CVE-2017-16751

A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code...

CVE-2017-16745

A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type 'type confusion' vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files...

Double free

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

CVE-2017-16749

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

CVE-2017-16747

CVE-2017-16747 affects Delta Electronics’ Delta Industrial Automation Screen Editor (Version 2.00.23.00 and earlier). The vulnerability is an out-of-bounds write while processing specially crafted .dpb project files, potentially allowing remote code execution or program crashes. Public exploitati...

CVE-2017-16747

An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files may cause the system to write outside the intended buffer area...

CVE-2017-16745

Delta Electronics’ Delta Industrial Automation Screen Editor (Version 2.00.23.00 and earlier) contains a type confusion vulnerability in the DPB project file parsing, specifically involving the CThemeWnd handling. Exploitation with specially crafted DPB files could allow remote code execution. Pu...

CVE-2017-16749

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

CVE-2017-16749

Delta Electronics Delta Industrial Automation Screen Editor (v2.00.23.00 or earlier) contains a Use-after-Free in the DPB project file parser (CDocument path). Exploitation requires user interaction and is locally scoped (AV:L, UI:R). Successful exploitation could allow arbitrary code execution. ...

CVE-2017-16751

CVE-2017-16751 affects Delta Electronics’ Delta Industrial Automation Screen Editor (version 2.00.23.00 or prior). The vulnerability is a stack-based buffer overflow triggered while parsing .dpb project files , which could allow an attacker to execute arbitrary code. Multiple connected sources co...

CVE-2018-8721

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

Windows 2016 Target Devices are not booting after upgrade to Provisioning Services 7.15.1 or 7.16

After upgrading Windows2016 Target devices from Provisioning Services 7.15 to 7.15.1 or 7.16, the device could be stuck at Windows logo or black screen at boot time...

CVE-2018-7675

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...

Receiver for Windows 4.9LTSR/4.10 - Citrix HDX Engine Crash When Connecting to Linux VDA

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When connecting from a client machine that has Receiver 4.9 LTSR or Receiver 4.10 upgraded from...

Someone hacked this advertising screen to mine Bitcoin

By Waqas The sudden surge in the price of Bitcoin encouraged the This is a post from HackRead.com Read the original post: Someone hacked this advertising screen to mine Bitcoin...

[20180504] - Core - Installer leaks plain text password to local user

The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and displays the plain text password for the administrator account at the confirmation screen...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6777

In Jiangmin Antivirus 16.0.0.100, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220400...