FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY

FireEye recently detected a malicious Microsoft Office RTF document that leveraged [CVE-2017-8759](), a SOAP [WSDL]() parser code injection vulnerability. This vulnerability allows a malicious actor t ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY

FireEye recently detected a malicious Microsoft Office RTF document that leveraged [CVE-2017-8759](), a SOAP [WSDL]() parser code injection vulnerability. This vulnerability allows a malicious actor t ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

Microsoft Windows .NET Framework – Remote Code Execution 0day Exploit

Exploit for windows platform in category remote exploitsRead More ...

Continue Reading
Microsoft .NET framework SOAP Moniker PrintClientProxy remote code execution vulnerability

### Overview The Microsoft .NET framework fails to properly parse WSDL content, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. ### Description The ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

Immunity Canvas: OFFICE_WSDL

**Name**| office_wsdl ---|--- **CVE**| CVE-2017-8759, CVE-2017-8570 **Exploit Pack**| [CANVAS]() **Description**| Microsoft Office Moniker/WSDL C# Injection **Notes**| CVE Name: CVE-2017-8759, CVE- ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

Microsoft .NET Framework Remote Code Execution

Post ContentRead More ...

Continue Reading
ONVIF Stream URI

Nessus was able to retrieve the remote devices video stream URI(s) by sending GetProfiles and GetStreamUri ONVIF requests.Read More ...

Continue Reading
U.S. Dept Of Defense: SharePoint exposed web services

Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an anonymous user has access to the SharePoint Web Services. The impact of this vulnerabili ...

Continue Reading

Back to Main

Subscribe for the latest news: