CSV (XLS) Injection (Excel Macro Injection or Formula Injection) exists in the AIM CrossChex version 4.3 when importing or exporting users using xls Excel file. This can be exploited to execute arbitrary commands on the affected system via SE attacks when an attacker inserts formula payload in the Name field when adding a user or using the custom fields Gender, Position, Phone, Birthday, Employ Date and Address. Upon importing, the application will launch Excel program and execute the malicious macro formula.
9934935bc5349b6cebbf4d3fe113a6d562530ce82af94be3a16bcc6ed7017ad7Slackware Security Advisory - New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
65f4dbc81ad891a30f90da807afd6698f33572afbe3c1ad0ca72642554585a0eThe Google Cardboard Android and iOS applications (Android version 1.8, iOS version 1.2 and below) sends potentially sensitive information such as OS, CPU architecture, graphics chip vendor and version, CPU count, RAM, VRAM, screen size, device make and model, unencrypted to a third party site (Unity 3D Stats).
42361a507af264ec429f830956d8abdd01925163d38d47dcc127b1fc891edff6An attacker can exploit the embedded version of Git used in Sourcetree if they can commit to a Git repository linked in Sourcetree. This allows them to execute arbitrary code on systems running a vulnerable version of Sourcetree for macOS. Versions of Sourcetree for macOS starting with version 1.02b before version 3.0.0 are affected by this vulnerability. Versions of Sourcetree for Windows starting with version 0.5.1.0 before version 3.0.0 are affected by this vulnerability.
32eacd269abd3e89eabbc766ac7946e1762c239c4e1ea7feaf37f59de4e0886fBrava! Enterprise and Server components versions 7.5 through 16.4 suffer from a sensitive data exposure vulnerability due to weak permissions.
22ddcecdf678369fce4fd0eec120348fb5cd6c405de17d297ede0c2e352fb5d9Zoho ManageEngine OpManager version 12.3 suffers from multiple cross site scripting vulnerabilities.
dd397fed4163fc8d8337bb0cec0c033bc8a073e6bddfd2ea65f12472b4f23b18This archive contains all of the 252 exploits added to Packet Storm in October, 2018.
2cdfde44988447d6cb183dd741826624e1b294f18ab4e409ef6ca5f2240763c8Artha The Open Thesaurus version 1.0.3.0 suffers from a denial of service vulnerability.
4cf7eda53e72ff722cef8e3b66039584bc650f6cee02f93e1b4c7e096f65dc11WebDrive version 18.00.5057 suffers from a denial of service vulnerability.
0f647243a7a443c8d4ebfdf161b9b82a659bb854d5df8201be399f82f4804f4fArm Whois version 3.11 suffers from a denial of service vulnerability.
a07509b584c200cf3ce7ed1d55d762c4cd6c02aff98ce2b08e7bb8de57adcd53
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed