The CVE-2017-13696 is a buffer overflow vulnerability has been identified in the web server component of several software applications: Dup Scout Enterprise version 9.9.14, Disk Savvy Enterprise version 9.9.14, Sync Breeze Enterprise version 9.9.16, and Disk Pulse Enterprise version 9.9.16. This vulnerability allows an attacker to craft a malicious GET request that targets the web server component. If an attacker successfully exploits this vulnerability, they can gain complete control over the affected system with NT AUTHORITY/SYSTEM level privileges, giving them the highest access level. The root cause of this vulnerability is the improper handling and lack of sanitization of incoming requests, which allows malicious input to disrupt the normal operation of the system. Users of these software applications must be aware of this vulnerability and take necessary precautions to protect their systems from potential attacks.
The CVE-2018-18913 states that Before version 57.0.3098.106, the Opera web browser had a security problem called DLL Search Order Hijacking. This issue happens when an attacker creates a ZIP file that contains an HTML page and a harmful Dynamic Link [...]
Post comments (0)