CVE-2017-12106

A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability...

New and Improved Version of airpwn: airpwn-ng

Features Inject to all visible clients a.k.a Broadcast Mode Inject on both open networks and WEP/WPA protected networks Targeted injection with -t MAC:ADDRESS MAC:ADDRESS Gather all visible cookies Broadcast Mode Gather cookies for specific websites –websites websiteslist.txt In this scenario,...

CVE-2017-13986

A reflected Cross-Site ScriptingXSS vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system...

Null Pointer Reference Vulnerability in PPLive

PPLive is an online video player developed and operated by Shanghai Poly Media Technology Co. A null pointer reference vulnerability exists when PPLive plays or opens a specific mkv file online, which can be exploited by an attacker to conduct a denial of service attack...

Null Pointer Reference Vulnerability in WPS Forms (CNVD-2017-30610)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or lead to code execution...

Null Pointer Reference Vulnerability in WPS Demo kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in the kso module of WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or lead t...

Microsoft Windows Kernel win32k!NtGdiHLSurfGetInformation Memory Disclosure Exploit

The Microsoft Windows kernel suffers from a stack memory disclosure vulnerability in win32k!NtGdiHLSurfGetInformation. Windows Kernel stack memory disclosure in win32k!NtGdiHLSurfGetInformation information class 3 CVE-2017-8677 We have discovered that the win32k!NtGdiHLSurfGetInformation system...

CVE-2017-1519

IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829...

IBM DB2 Denial of Service Vulnerability (CNVD-2017-33609)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 versions 10.5 and 11.1. A remote attacker could...

CVE-2017-10850

Untrusted search path vulnerability (CVE-2017-10850) affects Fuji Xerox DocuCentre-VI and ApeosPort-VI installers. The issue arises from insecure DLL search paths in multiple installers (e.g., ART EX Driver, XPS/PostScript drivers, FAX/Restore tools) and DocuWorks components, allowing an attacker...

kintera.org XSS vulnerability

Vulnerable URL: https://www.kintera.org/faf/auction///pictureDetail.asp?pictureURL=%22%3E%3Csvg/onload=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 73237 VIP...

Cisco Application Policy Infrastructure Controller SSH Privilege Escalation Vulnerability

According to its self-reported version, the Cisco Application Policy Infrastructure Controller APIC is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. C Tenable Network Security, Inc. include'compat.inc'; if...

Targeted Attack Landscape: A Continuing Threat

When planning the cyber defenses of an organization, it's important to factor in the total threat landscape - including continuing threats as well as emerging security issues. In this way, organizations can create a more holistic data protection posture. While not seen in many headlines currently...

Security vulnerabilities fixed in Thunderbird 52.3 — Mozilla

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. A use-after-free vulnerability can occur while re-computing layout for a marquee element during window...

CVE-2017-6771

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

Simple multi-threaded web crawler: dcrawl

dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site’s body. Each found link is put into the queue. Successively, each queued link is crawled in the sa...

Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US

No description provided...

SUSE-SU-2017:2103-1 Security update for Linux Kernel Live Patch 20 for SLE 12

This update for the Linux Kernel 3.12.61-5269 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote...

CVE-2017-9852

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or similar across installations installed by the same company but a...

CVE-2017-9521

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...