1229 matches found
Automatize Obfuscation and Generation of MS Office Documents: macro_pack
The macropack is a tool used to automatize obfuscation and generation of MS Office documents for pentest, demo, and social engineering assessments. The goal of macropack is to simplify antimalware solutions bypass and automatize the process from vba generation to final Office document generation...
Command injection
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...
November 22, 2017âKB4055254 (OS Build 15063.729)
None None...
November 14, 2017âKB4048959 (Monthly Rollup)
None None...
[SECURITY] Fedora 27 Update: thunderbird-52.4.0-2.fc27
Mozilla Thunderbird is a standalone mail and newsgroup client...
Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability
A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...
CVE-2014-0073
The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin org.apache.cordova.inappbrowser before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute...
[SECURITY] Fedora 26 Update: thunderbird-52.4.0-2.fc26
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 27 Update: mingw-libidn2-2.0.4-1.fc27
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
CVE-2017-11395
Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...
CVE-2017-11395: Improper Neutralization of Special Elements used in an OS Command
Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...
PT-2017-11979
Name of the Vulnerable Software and Affected Versions Trend Micro Smart Protection Server Standalone versions 3.1 through 3.2 Description A command injection issue exists in the server administration UI, allowing attackers with authenticated access to execute arbitrary code on vulnerable...
Trend Micro Smart Protection Operating System Command Injection Vulnerability
Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A command injection vulnerability exists in Trend Micro Smart Protection ServerStandalone. An attacker could exploit this vulnerability to execute arbitrary code...
[SECURITY] Fedora 26 Update: mingw-libidn2-2.0.4-1.fc26
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 27 Update: libidn2-2.0.4-1.fc27
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 25 Update: libidn2-2.0.4-1.fc25
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 26 Update: libidn2-2.0.4-1.fc26
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
Security feature bypass
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...
August 8, 2017âKB4034660 (OS Build 10586.1045)
None None...
CVE-2017-10605
On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...