CVE-2017-13779

GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...

CVE-2017-13779

GSTN_offline_tool (GSTN Offline Utility) prior to version 1.2 stores winstart-server.vbs in C:\GST Offline Tool with insecure permissions, enabling local privilege escalation by replacing the VBScript with arbitrary code (e.g., a reverse shell). Affected: GSTN Offline Utility before 1.2. Root cau...

The vulnerability of the component supported by Git-style software, the GNU Patch Unix utility for operating systems like Ubuntu and Fedora, allows a hacker to modify any files they desire.

The vulnerability of the Git-style programmatic Unix utility GNU Patch for operating systems like Ubuntu and Fedora is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files with the target user’s...

Debian DLA-1094-1 : tiff3 security update

A heap based buffer overflow has been discovered in the tiff2pdf utility, part of the Tag Image File Format TIFF library. A PlanarConfig=Contig image can cause an out-of-bounds write related to the ZIPDecode function. A crafted input may lead to a remote denial of service attack or an arbitrary...

Default configuration

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2017-10851

Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10851

CVE-2017-10851 affects Fuji Xerox ContentsBridge Utility for Windows (versions ≤ 7.4.0). The issue is an untrusted DLL search path (CWE-427) that allows a Trojan DLL loaded from an unspecified directory, enabling privilege escalation when running the installer. Affected installations include the ...

JVN#09769017: Multiple Fuji Xerox products may insecurely load Dynamic Link Libraries

Installers of multiple products, and DocuWorks self-extracting documents provided by Fuji Xerox Co.,Ltd. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the administrative...

Fuji Xerox ContentsBridge Utility for Windows Installer Search Path Handling Elevation of Privilege Vulnerability

Fuji Xerox ContentsBridge Utility for Windows is a document printing utility for Windows-based platforms. Fuji Xerox ContentsBridge Utility for Windows handles search paths due to a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a specially crafted...

DEBIAN-CVE-2017-13756

In The Sleuth Kit TSK 4.4.2, opening a crafted disk image triggers infinite recursion in dosloadexttable in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls...

CVE-2017-12763

An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files...

Code injection

An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files...

CentOS 7 : curl (CESA-2017:2016)

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Upgrading to Citrix Receiver for Windows

Beginning August 2018, Citrix Receiver has been replaced by Citrix Workspace app. While you can still download older versions of Citrix Receiver, new features and enhancements will be released for Citrix Workspace App. ​​​​​​​ Citrix Receiver for Windows has evolved to meet the platform and user...

CVE-2016-5018

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications...

CVE-2016-5018

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications...