CVE-2018-19290

In modules/HELPBOTMODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified other impact, as demonstrated by the "!calc 5 x 5"...

CVE-2018-19290

Budabot 0.6–4.0 is affected by CVE-2018-19290 due to lax syntax validation in the HELPBOT_MODULE, which enables a remote command-injection against the PHP daemon. The vulnerability affects the affected module code paths: calc.php (versions prior to 3.0) and HelpbotController.class.php (3.0 and ab...

CVE-2018-19290

In modules/HELPBOTMODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified other impact, as demonstrated by the "!calc 5 x 5"...

[SECURITY] Fedora 28 Update: glusterfs-4.1.6-1.fc28

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

PT-2018-14908

Name of the Vulnerable Software and Affected Versions Budabot versions 0.6 through 4.0 Description The issue allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command. This can result in a denial of service or possibly other unspecified impacts. F...

Google Android Privilege Access Control Vulnerability (CNVD-2018-25314)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege access control vulnerability exists in Yocto in Android, which stems from the program failing to properly configure the daemon. An attacker could exploit the...

CVE-2018-11946

The CVE-2018-11946 entry concerns CAF-derived Android/Linux builds (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability is that the UPnP daemon may be running out of the box, enabling port forwarding without authentication. Documented impacts indicate potential exposure due to un...

CVE-2018-11946

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

Authentication flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

PT-2018-10917

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue concerns the UPnP daemon in Android releases, which should not be running by...

CVE-2018-11946: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

[SECURITY] Fedora 29 Update: xen-4.11.0-10.fc29

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Stack overflow

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted...

CVE-2009-5153: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted...

Junos Routing Protocol Daemon Code Execution

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending numerous specially crafted Draft-Rosen MPLS packets...

Junos Routing Protocol Daemon Code Execution

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...

Juniper Device Manager Full Access

The vulnerability of the Juniper Device Manager JDM operating system is related to the use of a default password for SSHD. Exploiting this vulnerability can allow an attacker to gain full access to the device...

JunOS Routing Protocols Daemon DoS

The vulnerability of the Routing Protocols Daemon RPD service on the JunOS operating system is related to an uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

JunOS Routing Protocols Daemon DoS

The vulnerability of the Routing Protocols Daemon RPD error handler on the JunOS operating system is related to errors in resource release. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially crafted MPLS RSVP packet...

Budabot 4.0 Denial Of Service

4.0 Tested on: 4.0 CVE: CVE-2018-19290 1. Description In modules/HELPBOTMODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified...