GHSA-89R3-RCPJ-H7W6 Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

Adobe Illustrator Memory Corruption Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms. An attacker can exploit the vulnerability to execute code...

Cisco Webex Network Recording Player and Webex Player Buffer Overflow Vulnerability

Cisco Webex Network Recording Player and Cisco Webex Network Webex Player are both Cisco players for playing video conference recordings. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows platforms, which can be exploited by an...

Adobe Illustrator DLL Hijacking Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms, which can be exploited by attackers to elevate privileges...

JetBrains Toolbox Elevation of Privilege Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A security vulnerability exists in versions of JetBrains Toolbox prior to 1.15.5666 for Windows-based platforms. An attacker can exploit the vulnerability to elevate privileges...

chromium-browser: External URIs may trigger other browsers

Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

ThinVNC 1.0b1 Authentication Bypass

Exploit Title: ThinVNC 1.0b1 - Authentication Bypass Date: 2019-10-17 Exploit Author: Nikhith Tumamlapalli Contributor WarMarX Vendor Homepage: https://sourceforge.net/projects/thinvnc/ Software Link: https://sourceforge.net/projects/thinvnc/files/ThinVNC1.0b1/ThinVNC1.0b1.zip/download Version:...

CVE-2018-16859

Execution of Ansible content on Microsoft's Windows platform with Powershell 5 or higher may disclose sensitive execution details including 'become' passwords, Ansible module arguments, and return values via Powershell's 'suspicious scriptblock logging' feature, which is enabled by default. The...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

Foxit Reader V8 Engine Uncontrolled Recursion Vulnerability

Foxit Reader is China's Foxit Foxit company a PDF document reader . V8 is one of the open source JavaScript engine . An uncontrolled recursion vulnerability exists in the V8 engine in Foxit Reader 9.6.0.25114 and earlier versions for Windows platforms, which can be exploited by an attacker to cau...

CVE-2019-0207

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

Path traversal

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

CVE-2019-0207

The CVE-2019-0207 issue involves the Tapestry framework’s asset handling, where the asset path chain StaticFilesFilter → AssetDispatcher → ContextResource fails to filter the backslash character on Windows, enabling path traversal to read arbitrary files. Affected component: Tapestry assets proce...

Directory Traversal

tapestry-ioc is vulnerable to directory traversal. The \ character is not filtered when the library is used on a Windows platform, allowing an attacker to perform a path traversal attack to read arbitrary files...

Heap Overflow Vulnerability at Notepad++ Clipboard History Screen

Notepad++ is a suite of text editors for Windows operating systems Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. A heap overflow vulnerability exists in Notepad++ at the clipboard history screen. An attacker can...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, nginx servers, network programming tools like netty, Envoy, SwiftNIO, and Node.js software platforms. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...

CVE-2019-1162

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...

Tenable Network Security Nessus Access Control Error Vulnerability

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. An Access Control Error vulnerability exists in versions 8.5.2 and earlier of Tenable Network Security Nessus for Windows-based platforms, which can be exploited by an attacker to...

PT-2019-3254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling specially crafted embedded fonts in the Windows font library. Exploitation of this issue could allow a remote attacker to execute arbitrary code a...