412 matches found
CVE-2017-2791
Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...
CVE-2017-2791: Improper Restriction of Operations within the Bounds of a Memory Buffer
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
CVE-2017-2789: Improper Restriction of Operations within the Bounds of a Memory Buffer
When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...
Threat Outbreak Alert RuleID27986: Email Messages Distributing Malicious Software on February 22, 2017
Medium Alert ID: 52719 First Published: 2017 February 23 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27986 may contain the following files: Name |...
Github Enterprise Edition SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Github enterprise is github. com a custom version, you can use it in your own private network to deploy their own full github service to use for business purposes. You can be in enterprise. github. com download to the corresponding VM and get a 45 day trial right after you complete the deployment...
clinical-trial.com XSS vulnerability
Open Bug Bounty ID: OBB-161209 Description| Value ---|--- Affected Website:| clinical-trial.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Judge Tosses Evidence Gathered by FBI's Tor Exploit
The FBI’s refusal to share details about a network investigative technique it used to gather evidence against a Vancouver teacher charged with possession of child pornography has forced a federal judge’s hand to exclude the evidence from trial. The NIT used by the FBI to hack the Playpen website ...
Trial Xtreme Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Trial Xtreme Free published at the 'play' market has multiple vulnerabilities...
Asshole! Trial version - Exported components, External URLs, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application Asshole! Trial version published at the 'play' market has multiple vulnerabilities...
Poweramp Music Player (Trial) - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Poweramp Music Player Trial published at the 'play' market has multiple vulnerabilities...
PlayerPro Music Player Trial - Corrupted files, Exported ContentProvider, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application PlayerPro Music Player Trial published at the 'play' market has multiple vulnerabilities...
Car Launcher TRIAL - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Car Launcher TRIAL published at the 'play' market has multiple vulnerabilities...
DartTrainer app trial version - SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application DartTrainer app trial version published at the 'play' market has multiple vulnerabilities...
Baby Monitor 3G (Trial) - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Baby Monitor 3G Trial published at the 'play' market has multiple vulnerabilities...
OfficeSuite Pro + PDF (Trial) - Apache license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application OfficeSuite Pro + PDF Trial published at the 'play' market has multiple vulnerabilities...
World History Trial - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application World History Trial published at the 'play' market has multiple vulnerabilities...
PhoneWeaver Trial - Base64 encoded String, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application PhoneWeaver Trial published at the 'play' market has multiple vulnerabilities...
Talk to HUE Trial - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Talk to HUE Trial published at the 'play' market has multiple vulnerabilities...
Threat Outbreak Alert RuleID19474: Email Messages Distributing Malicious Software on November 18, 2015
Medium Alert ID: 42159 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19474KVR may contain the following files: Nam...
bigstockphoto.com XSS vulnerability
Vulnerable URL: http://www.bigstockphoto.com/free-trial/?kw=stock%20photos&c3api;=bgs,74741208841,stock%20photos%27,alert%28/xssposed/%29,%27=CPGul7zD4sYCFSfHtAodYbEGSA Details: Description| Value ---|--- Patched:| Yes, at 27.07.2015 Latest check for patch:| 27.07.2015 23:51 GMT Vulnerability...