CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. This is the story about another forgotten 0day fully disclosed more than 4 years ago by John Page aka hyp3rlinxR.1. To understand the report, you have to consider i'm stupid :- And...

EUVD-2015-3271

Malware in sbrugna...

EUVD-2003-0978

Malware in sbrugna...

EUVD-2019-17928

Malware in sbrugna...

CVE-2024-45513: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zimbra Collaboration ZCS through 10.1. A stored Cross-Site Scripting XSS vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a...

Ubuntu 18.04 ESM : VCFtools vulnerabilities (USN-4835-1)

The remote Ubuntu 18.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4835-1 advisory. It was discovered that VCFtools improperly handled certain input. If a user were tricked into opening a crafted input file, VCFtools could be made to cra...

Apple has a denial of service vulnerability in several products (CNVD-2020-59473)

Apple iOS is an operating system developed for mobile devices.Apple macOS High Sierra is a specialized operating system developed for Mac computers.Apple watchOS is a smartwatch operating system.Apple watchOS is a smartwatch operating system. A security vulnerability exists in a number of Apple...

CVE-2019-8538

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service...

CVE-2019-8538

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service...

CVE-2019-8538: Undefined Security Weakness

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service...

PT-2020-11262

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 macOS Mojave versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra Security Update versions prior to 2019-002 for Sierra iOS versions prior to 12.2 Description A denial of service...

Microsoft Windows VCF Denial Of Service Exploit

Microsoft Windows VCF cards do not properly sanitize email addresses allowing for HTML injection. A corrupt VCF card can cause all the users currently opened files and applications to be closed and their session to be terminated without requiring any accompanying attacker supplied code. + Credits...

Microsoft Windows VCF Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-VCF-MAILTO-LINK-DENIAL-OF-SERVICE.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product A VCF file is a standard file format for...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

PT-2019-11474

Name of the Vulnerable Software and Affected Versions: VCFTools versions prior to 0.1.15 Description: The issue is related to a use-after-free problem, which can lead to a Denial of Service or possibly other impacts such as code execution or information disclosure. The component affected is the...