Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16418)

A out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted XML/XPS file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16417)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16405)

An Out-of-bounds Read vulnerability exists in Adobe Reader and Acrobat. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer. A successful attack can lead to sensitive data exposure...

SQL Injection Vulnerability in Youkai 365 Business v1.5 System

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...

PT-2017-14247 · Cumulus +2 · Cumulus Linux +2

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions 2.0.2 and earlier, 3.x before 3.0.2 FRRouting FRR in Cumulus Linux before 3.4.3 Description: The issue allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer. Thi...

SAP NetWeaver Instance Agent Service Information Disclosure Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Instance Agent Service, which can be exploited b...

PT-2017-4218 · Vim +4 · Vim +4

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 8.0.1263 Description: The issue is related to the fileio.c component in Vim, which sets the group ownership of a .swp file to the editor's primary group. This can allow local users to obtain sensitive information by...

HackerOne: Private partial disclosure of h1 infrastructure

Description I've found that following servers & services can be potentially interesting when attacking h1-infrastructure: Payments Admin ██████ API Docs ██████████ API █████████ MailCatcher ██████████ Story Book ███ Karma ████████ Core Test Server █████████ Core Staging ████ Core Production...

SQL Injection Vulnerability in DM Enterprise Building System v201710

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system v201710 login at the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Zhangjiakou Extraordinary Technology Website Building System

Zhangjiakou Extraordinary Technology Co., Ltd Extraordinary Technology for short, is an Internet service provider in the field of enterprise informationization construction and application services. Zhangjiakou Extraordinary Technology website building system has a SQL injection vulnerability,...

SQL Injection Vulnerability in Ningbo Yinwen Network CMS

Yinwen Building System is a CMS content management system. A SQL injection vulnerability exists in Ningbo Yinwen Web CMS. The vulnerability is caused due to the system failing to effectively filter the data submitted by users. An attacker can exploit this vulnerability to obtain sensitive...

Cisco Spark Messaging Software HTML Injection Vulnerability

Cisco Spark Messaging Software is a collaboration service solution from Cisco. The program by providing a virtual space, so that teams in any location can work together, call and video, and can discuss issues, storage team files and documents. A cross-site scripting vulnerability exists in the We...

Informatica: [marketplace.informatica.com] - Sensitive Data Exposure

The researcher has identified and reported a Sensitive Data Exposure vulnerability in one of the Informatica's domain, and helped us in resolving the issue...

Huawei FusionSphere OpenStack Information Disclosure Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere OpenStack suffers from an...

SQL Injection Vulnerability in BageCms Content Management System

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability, the vulnerability is due to the system fails to effectively filter the catalog parameters. An attacker can exploi...

SQL Injection Vulnerability in Xi'an Van Gogh Network Technology Co.

Xi'an Van Gogh Network Technology Co., Ltd. is a company engaged in the company website construction, do website company, website design and production, Xi'an website production, cell phone website production and so on. A SQL injection vulnerability exists in the website building system of Xi'an...

SQL Injection Vulnerability in MIPCMS ApiAdminTag.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

MGASA-2017-0317 Chromium-browser 60.0.3112.101 fixes security issues

Multiple flaws were found in the way Chromium 57 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060,...

SQL Injection Vulnerability in Xiaowei OA v2.0

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2017-6784

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...