Apache UNO Remote Code Execution

A remote code execution vulnerability exists in Apache UNO server. Successful exploitation of this vulnerability could lead to arbitrary code execution on the target machine...

Apache UNO API Remote Code Execution

""" Exploit Title: Apache UNO API RCE Date: 2018-09-18 Exploit Author: sud0woodo Vendor Homepage: https://www.apache.org/ Software Link: https://www.openoffice.org/api/ Version: LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 but really any version with the UNO API included Tested on: Ubuntu Mate...

Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API - Remote Code Execution Exploit

""" Exploit Title: Apache UNO API RCE Exploit Author: sud0woodo Vendor Homepage: https://www.apache.org/ Software Link: https://www.openoffice.org/api/ Version: LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 but really any version with the UNO API included Tested on: Ubuntu Mate 18.04 with kernel...

Apache UNO LibreOffice Version: 6.1.2 OpenOffice 4.1.6 API - Remote Code Execution

Apache UNO LibreOffice Version: 6.1.2 OpenOffice 4.1.6 API - Remote Code Execution """ Exploit Title: Apache UNO API RCE Date: 2018-09-18 Exploit Author: sud0woodo Vendor Homepage: https://www.apache.org/ Software Link: https://www.openoffice.org/api/ Version: LibreOffice Version: 6.1.2 /...

Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API - Remote Code Execution

""" Exploit Title: Apache UNO API RCE Date: 2018-09-18 Exploit Author: sud0woodo Vendor Homepage: https://www.apache.org/ Software Link: https://www.openoffice.org/api/ Version: LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 but really any version with the UNO API included Tested on: Ubuntu Mate...

Apache UNO API Remote Code Execution Vulnerability

When Apache OpenOffice and LibreOffice are spawn as an office server, they bind an Apache UNO API that allows for remote code execution. Dear reader, I am not sure if I am contacting through the right email address but someone said I should e-mail you guys. I found an RCE functionality in the...

SQL Injection Vulnerability in Uno Network Technology Website Building System

Shenyang Uno Technology Co., Ltd. is a one-stop service brand marketing planning company committed to providing Chinese enterprises with one-stop service suitable for the development of the times, integrating enterprise station building, search engine optimization, WAP website, APP client and so...

libreoffice/fodtfuzzer: Heap-double-free in cppu::_destructAny

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5019470171996160 Project: libreoffice Fuzzer: libFuzzerlibreofficefodtfuzzer Fuzz target binary: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-double-free...

libreoffice/xlsxfuzzer: Bad-cast to com::sun::star::uno::XInterface from cppuhelper::detail::XExceptionThrower in com::sun::star::uno::Reference<cppuhelper::detail::XExceptionThrower>::~Reference

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6162193541234688 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsxfuzzer Fuzz target binary: xlsxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/docxfuzzer: Heap-buffer-overflow in cppu::OWeakObject::release

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4648468690763776 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

uno-caol-showten.com XSS vulnerability

Open Bug Bounty ID: OBB-385447 Description| Value ---|--- Affected Website:| uno-caol-showten.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Atlassian Confluence AppFusions Doxygen 1.3.0 Path Traversal

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)

Exploit for Android platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" ...

Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

Exploit for hardware platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...

UNO ™ & Friends - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application UNO ™ & Friends published at the 'play' market has multiple vulnerabilities...

Hurray Uno - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hurray Uno published at the 'play' market has multiple vulnerabilities...

Uno For All - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Uno For All published at the 'play' market has multiple vulnerabilities...

Uno Pizza - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Uno Pizza published at the 'play' market has multiple vulnerabilities...