DSquare Exploit Pack: D2SEC_STRUTS2

Name| d2secstruts2 ---|--- CVE| CVE-2012-0391 Exploit Pack| D2ExploitPack Description| d2secstruts2 Notes|...

CVE-2012-0391

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter...

CVE-2012-0391

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter...

CVE-2012-0391

CVE-2012-0391 affects Apache Struts 2 before 2.2.3.1, where the ExceptionDelegator interprets parameter values as OGNL expressions during certain exception handling for mismatched data types, enabling remote code execution via a crafted parameter. Multiple sources (CVE entry, CISA KEV, GHSA advis...

Apache Struts Remote Command Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexecexceptiondelegator msf undefinedcodeexecexceptiondelegator show actions ...actions... msf undefinedcodeexecexceptiondelegator set ACTION msf...

CVE-2012-0391

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18329 2012-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18984 2018-05-29 15:50:33+00:00| seen|...

CentOS Update for libvirt CESA-2011:0391 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libvirt security update

CentOS Errata and Security Advisory CESA-2011:0391 Updated libvirt packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

RHEL 5 / 6 : libvirt (RHSA-2011:0391)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0391 advisory. - libvirt: several API calls do not honour read-only connection CVE-2011-1146 Note that Nessus has not tested for this issue but has instead reli...

CVE-2011-0391

CVE-2011-0391 affects Cisco TelePresence Recording Server devices running software 1.6.x. The issue is a denial-of-service condition caused by a malformed request related to the ad hoc recording feature, enabling an unauthenticated remote attacker to exhaust threads and cause device outage. Cisco...

CVE-2010-0391

CVE-2010-0391 involves multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437. The root cause is stack overflow conditions triggered by crafted packets, enabling remote attackers to execute arbitrary code. No remediation details are provided in the supplied...

CVE-2010-0391

Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-0391

Technical details about CVE-2009-0391 (affected WAS component, root cause, exploit vectors or fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2008-0391

The CVE-2008-0391 entry concerns inc/elementz.php in aliTalk 1.9.1.1, where authentication verification is flawed, enabling remote attackers to add an arbitrary user account by tampering with the lilil parameter alongside ubild and pa. The vulnerability enables partial confidentiality, integrity,...

Debian Security Advisory DSA 143-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 143-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BitDefender Client Log Creation Functionality Format String

The version of BitDefender installed on the remote host fails to sanitize scan job settings of format strings. By leveraging this flaw, a local attacker may be able to crash the antivirus application or possibly even gain complete control of the affected system. C Tenable Network Security, Inc...

CVE-2007-0391

BitDefender Client Professional Plus 8.02 is affected by a format-string vulnerability in the log-creation functionality. An attacker could leverage this flaw via certain scan job settings to execute arbitrary code or take control of the affected system. The description and references across NVD/...

CVE-2006-0391

CVE-2006-0391 is a directory traversal vulnerability in Apple Mac OS X’s BOM framework (BOMArchiveHelper) that affects 10.x before 10.3.9 and 10.4 before 10.4.5. The issue allows a user-assisted attacker to overwrite or create arbitrary files via an archive processed by BOMArchiveHelper. The conf...

CVE-2006-0391

Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper...

iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability

Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability iDefense Security Advisory 03.02.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399 March 02, 2006 I. BACKGROUND Mac OS X is an operating system for the Apple family of microcomputers. More information is...