5773 matches found
Unix Command Shell, Reverse TCP (via R)
Connect back and create a command shell via R This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 157 include Msf::Payload::Single include Msf::Payload::R include...
R Command Shell, Bind TCP
Continually listen for a connection and spawn a command shell via R This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 125 include Msf::Payload::Single include Msf::Payload::R include...
R Command Shell, Reverse TCP
Connect back and create a command shell via R This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 150 include Msf::Payload::Single include Msf::Payload::R include...
August 4, 2017 – Morning Cyber Coffee Headlines – “Gerald R. Ford ” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 4, 2017 - Headlines Why can't films and TV accurately portray hackers? -...
MGASA-2017-0236 Updated R-base packages fix security vulnerability
Cory Duplantis discovered a buffer overflow in the R programming language. A malformed encoding file may lead to the execution of arbitrary code during PDF generation CVE-2016-8714...
Updated R-base packages fix security vulnerability
Cory Duplantis discovered a buffer overflow in the R programming language. A malformed encoding file may lead to the execution of arbitrary code during PDF generation CVE-2016-8714...
The vulnerability of the getNodeSize function in the SQLite database management system allows attackers to carry out other attacks.
The vulnerability of the getNodeSize function in the SQLite database management system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to exert other effects using the reduced size of RTree blobs within the...
CVE-2017-8011
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
CVE-2017-8011
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
CVE-2017-8011
CVE-2017-8011 is substantiated by connected disclosures indicating default/undocumented accounts with passwords in EMC/VNX monitoring products, enabling remote execution when the Webservice Gateway/RMI JMX are targeted. ZDI-17-505 details a remote code execution path via static credentials in the...
Fedora 26 : R / rkward / rpy (2017-07c8f3ea2b)
Update to 3.3.3. Fix CVE-2016-8714. ---- Rebuilt for fc26 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2017-8011: Use of Hard-coded Credentials
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
PT-2017-2832
Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 4.1 EMC Storage M&R versions prior to 4.1 EMC VNX M&R all versions EMC M&R Watch4Net for SAS Solution Packs all versions Description The issue concerns undocumented accounts with default passwords for Webservice...
nuevoMailer 'r' Parameter SQL Injection Vulnerability
nuevoMailer is an email marketing software that can be used to manage mailing lists and track autoresponders. A SQL injection vulnerability exists in nuevoMailer 6.0 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the 'r'...
CVE-2017-9730
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...
PT-2017-19142
Name of the Vulnerable Software and Affected Versions nuevoMailer versions 6.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the r parameter in the rdr.php file. Recommendations For nuevoMailer versions 6.0 and earlier, update to...
CVE-2017-9730: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...
PT-2017-18388 · Microsoft · Windows 8.1 +6
Name of the Vulnerable Software and Affected Versions: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 Description: An information disclosure issue exists due to affected Microsoft scripting engines not...
PT-2017-18987
Name of the Vulnerable Software and Affected Versions radare2 version 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted DEX file. This is due to a problem in the r config set function. Recommendatio...
