58 matches found
EUVD-2018-11805
Malware in sbrugna...
EUVD-2018-11807
Malware in sbrugna...
EUVD-2018-3640
Malware in sbrugna...
SUSE CVE-2007-0448
The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safemode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath URI...
CVE-2020-13699
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...
CVE-2020-13699
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...
Cross site request forgery (csrf)
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...
CVE-2020-13699: Improper Neutralization of Argument Delimiters in a Command
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...
PT-2020-3665
Name of the Vulnerable Software and Affected Versions TeamViewer Desktop for Windows versions prior to 15.8.3 TeamViewer versions 8.0 through 14.7 Description The issue is related to TeamViewer's custom URI handlers not being properly quoted, allowing a malicious website to launch TeamViewer with...
CVE-2019-11582
An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI...
Design/Logic Flaw
An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI...
CVE-2019-11582
Atlassian SourceTree for Windows is affected by CVE-2019-11582. A remote code execution vulnerability exists in the URI handling component for Windows versions starting with 0.5a up to, but not including, 3.1.3. An unauthenticated attacker can exploit this by sending a crafted URI; user interacti...
CVE-2019-11582: Improper Neutralization of Argument Delimiters in a Command
An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI...
PT-2019-12392
Name of the Vulnerable Software and Affected Versions Atlassian Sourcetree for Windows versions prior to 3.1.3 Description The issue allows remote attackers to gain remote code execution through the use of a crafted URI, due to an argument injection vulnerability in Atlassian Sourcetree for...
Remote code execution vulnerability for Sourcetree for Windows - CVE-2019-11582
There was an argument injection vulnerability in SourceTree for Windows in URI handlers. A remote, unauthenticated attacker was required to convince a user to interact with a crafted URL in order to exploit the vulnerability. With user interaction, an attacker could gained remote code execution o...
CVE-2018-15832
CVE-2018-15832 affects Ubisoft Uplay Desktop Client (upc.exe) version 63.0.5699.0, where the vulnerability arises from improper validation of a user-supplied string used in a system call during URI handling. This allows remote code execution under the current process context. Exploitation require...
CVE-2018-15832: Improper Input Validation
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI...
PT-2018-13224
Name of the Vulnerable Software and Affected Versions Ubisoft Uplay Desktop Client version 63.0.5699.0 Description The issue is related to the processing of URI handlers in the upc.exe component. It results from the lack of proper validation of a user-supplied string before using it to execute a...
Foxmail <= 7.2.9.115 RCE Vulnerability
Tencent Foxmail is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2018-11616
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...