CVE-2018-4909

Adobe Acrobat Reader CVE-2018-4909 affects versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The flaw arises from computing on data past the end of a target buffer in the image conversion module when processing JPEG metadata, potentially exposing sen...

CVE-2018-4882

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4914

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4900

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4907

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4883

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the...

CVE-2018-4905

Technical details about CVE-2018-4905 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories for affected products and remediation guidance.

CVE-2018-4881

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

SCP/SFTP/FTP Sensitive Data Exposure via Config File (HTTP)

The script attempts to identify SCP/SFTP/FTP configuration files containing sensitive data at the remote web server. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PDFium out-of-bounds read and integer overflow

An out-of-bounds and integer overflow vulnerabilities exists in PDFium. The vulnerabilities is due to an error in parsing a malformed PDF document. Successful exploitation could result in sensitive data exposure and memory corruption...

What you didn’t know about OWASP Top-10 2017? Part 3/3

This is the last part of my trilogy about OWASP Top-10 2017 risks. Two previous parts one and two described A1-A6 risks and this time I’d like to not just explain A7-A10 risks but also draw an intersection or overlap venn diagram of them. I hope this diagram would clarify why the questions about...

SQL Injection Vulnerability in CMS of Shanghai Seek Creative Technology Co.

Ltd. specializes in providing customers with high-end website planning, website construction, website design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the CMS of Shanghai Seek Creative Technology Co., Ltd, which can be...

SQL Injection Vulnerability in Website Construction System of Guangzhou Netsky Network Technology Co.

Guangzhou net days Network Technology Co., Ltd. long-term service in the Internet information technology high-tech positions, specializing in various industries in the enterprise company's e-commerce, website construction and website promotion corporate publicity, software development and other...

Worry-Free Shopping System ASP General Edition suffers from SQ Injection Vulnerability

Hassle-free shopping system ASP General Edition is a shopping site based on ASP/Access development of general management system set up. Worry-Free Shopping System ASP General Edition suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

What you didn’t know about OWASP Top-10 2017? Part 1/3

I hope everybody have already read the latest OWASP Top-10 list . Let me share some useful insights about it. First of all, OWASP Top-10 is NOT a vulnerability classification system. Rather it is a list of the most critical security risks for web application. What’s the difference? For example, t...

SQL Injection Vulnerability in XiaoCMS Backend Database.php Page

Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. A SQL injection vulnerability exists in the database.php page of XiaoCMS backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Friend's Home App Has Logic Design Flaws

Friends Home App is a social B&B platform based on acquaintance relationship. There is a logical design vulnerability in the Friend's Home APP, which can be exploited by an attacker to register arbitrary accounts and reset account passwords, leading to account abuse and consumption of service...

SQL Injection Vulnerability in DuxCms 3.0

DuxCms is a small and medium-sized website builder based on PHP+MYSQL and written in CANPHP framework. DuxCms 3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Yitianlian's Website Building System

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing professional network marketing services for enterprises. A SQL injection vulnerability exists in the Yitianlian Technology website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information ...

SQL injection vulnerability in the pro_content.php page of Xuchang Chunqiu Network Technology Co.

Xuchang Chunqiu Network Technology Co., Ltd. is a one-stop IT service company dedicated to website construction, network promotion, keyword optimization, 400 phone, talent network, software development and application, service outsourcing and many other businesses in one. A SQL injection...