#windows

The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On Linux, read any file, download any directory, delete any file, upload any file to any directory accessible by the web server.

By Waqas LokiBot, a notorious Trojan active since 2015, specializes in stealing sensitive information from Windows machines, posing a significant threat to user data. This is a post from HackRead.com Read the original post: New Attack Drops LokiBot Malware Via Malicious Macros in Word Docs

By Waqas Microsoft has exposed and halted an intrusion campaign by a China-based threat actor, Storm-0558. This is a post from HackRead.com Read the original post: Chinese Group Storm-0558 Hacked European Govt Emails, Microsoft

Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Banner RotatorCMS version 1.0 suffers from a database disclosure vulnerability.

Avidi Media version 2.0 appears to leave default credentials installed after installation.

AtTestimonials CMS version 1.2 suffers from a missing authentication vulnerability.

Atom CMS version 2.0 suffers from a directory traversal vulnerability.

Nedal CMS version 1.2 suffers from a remote SQL injection vulnerability.

Asanhamayesh CMS version 3.4.6 suffers from a directory traversal vulnerability.