Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload

Samsung NVR Recorder SRN-1670D is a high performance network video recorder. An arbitrary file upload vulnerability was found in the Web Viewer component, which could allow an authenticated user to upload a PHP payload to get code execution. Recent assessments: jvazquez-r7 at September 12, 2019...

PT-2017-14439

Name of the Vulnerable Software and Affected Versions Web Viewer version 1.0.0.193 Description The issue allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the "network ssl upload.php" endpoint. This is achieved by accessing the...

Exploit for Unrestricted Upload of File with Dangerous Type in Hanwhasecurity Web_Viewer

CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF...

Apache Storm Directory Traversal Vulnerability

Apache Storm is the United States Apache Apache Software Foundation of a set of Clojure Concurrent Programming Language development of free open-source distributed real-time computing system. log viewer is one of the log viewer tool. A directory traversal vulnerability exists in the log viewer in...

Directory traversal

Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to log...

CVE-2014-0115

Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to log...

CVE-2014-0115

Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to log...

CVE-2014-0115

The CVE-2014-0115 entry describes a directory traversal vulnerability in the log viewer of Apache Storm 0.9.0.1. An attacker can use a .. sequence in the log file parameter to read arbitrary files, potentially exposing sensitive data. The connected sources reiterate this flaw (path traversal in A...

CVE-2014-0115: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to log...

PT-2017-3167

Name of the Vulnerable Software and Affected Versions Apache Storm version 0.9.0.1 Description The issue is related to a directory traversal vulnerability in the log viewer of Apache Storm. This vulnerability allows remote attackers to read arbitrary files by using a .. dot dot in the file...

Microsoft Office Memory Code Execution

The vulnerability in Microsoft Office Web Apps servers, the Excel Web App application for browsing Excel spreadsheets in a Microsoft browser, the Microsoft SharePoint Server corporate application suite, the Microsoft Excel spreadsheet editor, the Microsoft Office Compatibility Pack compatibility...

Microsoft Office Memory Code Execution

The vulnerabilities of the Microsoft Office Compatibility Pack, Office Online Server, Microsoft Office Web Apps, Word Viewer and Microsoft Excel Web App, SharePoint applications, Microsoft Word text editor, and Word Automation Services are related to improper handling of objects in memory...

[SECURITY] [DSA 4006-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4006-1 [email protected] https://www.debian.org/security/ October 24, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34950)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34948)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34949)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

Multiple Memory Corruption Vulnerabilities in STDU Viewer's Handling of TIFFs

STDU Viewer is an electronic document reader that supports TIF, PDF, djvu formats. STDU Viewer suffers from multiple memory corruption vulnerabilities when handling TIFF images, which could allow an attacker to cause a program crash or arbitrary code execution by constructing malformed TIFF forma...

Multiple Memory Corruption Vulnerabilities in STDU Explorer's Handling of TIFFs

STDU Explorer is an image file and e-book format viewer. STDU Explorer has multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited to cause the program to crash by constructing a malformed TIFF image, or can be successfully exploited to cause arbitrary co...

Hitachi HIBUN Confidential File Viewer Installer Untrusted Search Path Vulnerability

Hitachi HIBUN Confidential File Viewer is a set of confidential file viewers from Hitachi Solutions Japan. install is one of the installation programs. An untrusted search path vulnerability exists in the installer in versions of Hitachi HIBUN Confidential File Viewer prior to 11.20.0001. The...

CVE-2017-11826

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...