Sitecore.Net 8.1 - Directory Traversal

Exploit Title: Sitecore.Net 8.1 - Directory Traversal Date: 2018-04-23 CVE: CVE-2018-7669 Researcher: Chris Moberly at The Missing Link Security Vendor: Sitecore Version: CMS - 8.1 and up earlier versions untested Authentication required: Yes An issue was discovered in Sitecore CMS that affects a...

Unable to deploy custom receiver from Store front. Getting " An error occurred while saving changes on the "Deploy Citrix Receiver" property dialog. Please check the log in event viewer and try again."

While trying to add customized "receiver.exe" to deploy receiver option in Storefront, you might get following error while saving it. "An error occurred while saving changes on the "Deploy Citrix Receiver" property dialog. Please check the log in event viewer and try again". It works fine with...

Unable to un-check the "Disable display scaling on high DPI settings" for Citrix Desktop Viewer

Citrix Desktop Viewer is unable to reach the correct resolution of a 4k monitor. Max resolution by the monitor is 3840 x 2160 but when launched Desktop Viewer is able to reach only 2560 x 1440. Changing the High DPI settings to use the native resolution Advanced High DPI, Select "No, use native...

DVR Web Remote Viewer Detection (HTTP)

HTTP based detection of a DVR Web Remote Viewer software. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

Foxit Reader < 9.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4032214)

This host is missing an important security update according to Microsoft KB4032214 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Updates for Microsoft Office Viewer Products / Office Compatibility Products (July 2018)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Malicious Software Packages Found On Arch Linux User Repository

Yet another incident which showcases that you should not explicitly trust user-controlled software repositories. One of the most popular Linux distrosArch Linux has pulled as many as three user-maintained software repository AUR packages after it was found hosting malicious code. Arch Linux is an...

Malicious Software Packages Found On Arch Linux User Repository

Yet another incident that shows why you should never blindly trust packages from user-controlled software repositories. Arch Linux , one of the most popular independently developed Linux distributions, has removed three packages from its community-driven Arch User Repository AUR after they were...

CVE-2018-8281

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office...

Remote code execution

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office...

Security Update for Word Viewer (KB4032214)

A security vulnerability exists in Word Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Word Viewer: July 10, 2018

None None...

Microsoft Office CVE-2018-8281 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Geutebruck simple_loglistjs.cgi Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geutebruck simpleloglistjs.cgi Remote Command Execution', 'Description' = %q This module exploits a an arbitrary command execution vulnerability...

PVS config wizard failed with error " Service Start for Citrix PVS Soap Service failed. The service did not respond to start or control request in a timely fashion. (0x41d)"

While running the Configuration wizard it fails to start the network service. Event viewer shows that the soap service has terminated. Soap service is in stopped state and is not able to start the service. PVS config wizard failed with error " Service Start for Citrix PVS Soap Service failed. The...

[SECURITY] Fedora 28 Update: mupdf-1.13.0-8.fc28

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...