Pdfium - Pattern Shading Integer Overflows
EDB-ID: 44082Author: Google Security ResearchPublished: 2018-02-15CVE: N/A Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: Integer OverflowVulnerable App: N/A The DrawXShading...
View ArticlePdfium - Out-of-Bounds Read with Shading Pattern Backed by Pattern Colorspace
EDB-ID: 44083Author: Google Security ResearchPublished: 2018-02-15CVE: N/A Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: Out Of BoundsVulnerable App: N/A When parsing...
View ArticleDell EMC VMAX Virtual Appliance (vApp) File Upload / Hardcoded Password
Dell EMC VMAX Virtual Appliance (vApp) Manager suffers from file upload and hardcoded password vulnerabilities. Affected includes Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
View ArticleGNU binutils 2.26.1 Integer Overflow
GNU binutils version 2.26.1 suffers from an integer overflow vulnerability.MD5 | 86e073dd65878eceaa6cd4bdecdc45cfDownload# Exploit Title: Objdump - Integer Overflow Crash POC# Date: 12.02.2018# Exploit...
View ArticleuserSpice 4.3 Cross Site Scripting
userSpice version 4.3 suffers from a cross site scripting vulnerability.MD5 | d5da674ca1fb9724ff316f704c021b3aDownloadApplication UserSpice PHP user managementVulnerability userSpice <= 4.3...
View ArticleNAT32 Build 22284 Remote Command Execution
NAT32 Build 22284 suffers from a remote command execution vulnerability.MD5 | d782ad11ffc709c5a0e961ea5e585448Download[+] Credits: hyp3rlinx [+] Website: hyp3rlinx.altervista.org[+] Source:...
View ArticleMicrosoft Edge Chakra JIT Incomplete Fix
Microsoft Edge Chakra JIT suffers from a bypass vulnerability.MD5 | a1bcc09777f48b460ea48c8fe2b4e014DownloadMicrosoft Edge: Chakra: JIT: Incomplete fix for issue 1365CVE-2018-0770It seems this is the...
View ArticleNews Website Script 2.0.4 SQL Injection
News Website Script version 2.0.4 suffers from a remote SQL injection vulnerability.MD5 | 7a4bb6574c7180e2cf83c47bc96e4aa3Download###################################################################...
View ArticleMicrosoft Intune App PIN Bypass
Compass Security discovered a design weakness in Microsoft Intune's app protection. This weakness allows a malicious user that gets hold of an employee's iOS device to access company data even without...
View ArticleSocial Oauth Login PHP SQL Injection
Social Oauth Login PHP suffers from a remote SQL injection vulnerability that allows for authentication bypass.MD5 | 50c6d42d491cdd52647e23330f7ba0bfDownload# Exploit Title: Social Oauth Login PHP -...
View ArticleSOA School Management Remote SQL Injection
SOA School Management suffers from a remote SQL injection vulnerability.MD5 | a9a4654f5a03838a5ddc5cf5ccbf9410Download# Exploit Title: SOA - School Management Software with IntegratedParents/Students...
View ArticleWordPress UltimateMember 2.0 Cross Site Scripting
WordPress UltimateMember plugin version 2.0 suffers from multiple cross site scripting vulnerabilities.MD5 | ad31bc4c93b7bee1d023747d80c17ee9Download1 of 2:# Exploit Title: Stored Cross-Site Scripting...
View ArticleTypeSetter CMS 5.1 Cross Site Request Forgery
TypeSetter CMS version 5.1 suffers from a cross site request forgery vulnerability.MD5 | c3781a44eff5184539eb3e3e64a5512fDownload# Exploit Title: TypeSetter CMS 5.1 Cross Site Request Forgery# Date:...
View ArticleNAT32 Build 22284 Remote Command Execution / CSRF
NAT32 build 22284 suffers from code execution and cross site request forgery vulnerabilities.MD5 | 49c0a8a084c7998bc4e286750e176f76Download[+] Credits: hyp3rlinx[+] Website: hyp3rlinx.altervista.org[+]...
View ArticleDell EMC Isilon OneFS XSS / Code Execution / CSRF
Dell EMC Isilon OneFS suffers from code execution, cross site request forgery, and cross site scripting vulnerabilities.MD5 | 035ddfcb8a7d024e325b9f233a3d9bcfDownloadCore Security - Corelabs...
View ArticleChrome V8 Runtime_RegExpReplace Integer Overflow
Chrome V8 suffers from a Runtime_RegExpReplace integer overflow vulnerability.MD5 | 6eecead5f17d54fb399a387633a037f1DownloadChrome: V8: Integer overflow in Runtime_RegExpReplace Here's a snippet of the...
View ArticleMicrosoft Edge Chakra JIT LdThis Type Confusion
Microsoft Edge Chakra JIT suffers from an LdThis type confusion vulnerability.MD5 | 24f96c408071fcd626fc4ff4726c8d8dDownloadMicrosoft Edge: Chakra: JIT: LdThis type confusion CVE-2018-0837LdThis...
View ArticleMicrosoft Edge Chakra JIT ImplicitCallFlags Checks Bypass
Microsoft Edge Chakra JIT suffers from an ImplicitCallFlags checks bypass vulnerability.MD5 | 7c60809db202d943e78cfc2a70359dc0DownloadMicrosoft Edge: Chakra: JIT: ImplicitCallFlags checks bypass...
View ArticlePdfium Pattern Shading Integer Overflow
Pdfium suffers from integer overflow vulnerabilities in pattern shading.MD5 | 8249e633f7fb1bb2b541a3a9f968bfb2DownloadSource:packetstormsecurity.com
View ArticleMicrosoft Edge Chakra JIT Escape Analysis Bug
Microsoft Edge Chakra JIT escape analysis bug #2.MD5 | 95ea3c7500bedcd3b29eea81e6d8b9deDownloadMicrosoft Edge: Chakra: JIT: Escape analysis bug #2CVE-2018-0860Let's consider the following example...
View Article