Super Progressive Web Apps < 2.1.13 - Authenticated (High Privileged) Arbitrary File Upload to RCE

When the Apple Touch Icons & Splash Screen add-on is active, its superpwasplashscreenuploader AJAX action, did not properly check for authorisation and the content of the uploaded archive file. This allows high privilege users admin+ to upload an archive with a PHP file, leading to RCE. v2.1.12...

WordPress Super Progressive Web Apps plugin <= 2.1.12 - Authenticated Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)

Authenticated Arbitrary File Upload vulnerability leading to Remote Code Execution RCE discovered by WPScan Team in WordPress Super Progressive Web Apps plugin versions = 2.1.12. Solution Update the WordPress Super Progressive Web Apps plugin to the latest available version at least 2.1.13...

Super Progressive Web Apps < 2.1.13 - Authenticated (High Privileged) Arbitrary File Upload to RCE

When the Apple Touch Icons & Splash Screen add-on is active, its superpwasplashscreenuploader AJAX action, did not properly check for authorisation and the content of the uploaded archive file. This allows high privilege users admin+ to upload an archive with a PHP file, leading to RCE. v2.1.12...

Description of the security update for Office Web Apps Server 2013: June 8, 2021 (KB5001956)

None None...

Security Updates for Microsoft Office Web Apps (June 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-31939 %NASLMINLEVEL 70300 C...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to improper code generation during the processing of COM objects. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malware file or a specially crafted...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from the possibility of writing operations beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps lies in the lack of protection for sensitive data, allowing attackers to disclose protected information.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Description of the security update for Office Web Apps Server 2013: May 11, 2021 (KB5001928)

None None...

Microsoft Excel 数字错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office Web Apps Server 2013...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. The following products...

Security Updates for Microsoft Office Web Apps (May 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is an offensive tool for various areas, including web application security, penetration testing, and vulnerability research. The primary purpose of Vulhub is to provide a convenient and...

The vulnerability of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server relates to insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server are related to insufficient protection of sensitive data. Exploiting these vulnerabilities can allow attackers to gain...

Oracle Application Testing Suite (Apr 2021 CPU)

The 13.3.0.1 versions of Application Testing Suite installed on the remote host are affected by a vulnerability as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps OpenCV. T...

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages lies in errors related to code generation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages is related to errors in code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages arises from improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (April 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists. An unauthenticated, local attacker can exploit this to bypass authentication and execute unauthorized...