Arbitrary File Write via Archive Extraction (Zip Slip)

Overview org.springframework.integration:spring-integration-zip provides Zip un- compression support. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal...

Amazon Linux AMI : openssl (ALAS-2018-1016)

There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...

Nexevo Contact Form, Backdoor

Nexevo Contact Form, Backdoor Resolution: update to 1.0.2 Users should also check for the existence of a plugin called System - Section among their installed extensions. It is malware and needs to be removed and the site treated as hacked. Further information here:...

HRSALE The Ultimate HRM Cross-Site Scripting Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A cross-site scripting vulnerability exists in HRSALE The Ultimate HRM version 1.0.2, which originates from the program failing to validate user-submitted input. A remote attacker can exploit this vulnerability by injecting...

HRSALE The Ultimate HRM SQL Injection Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A SQL injection vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. The vulnerability can be exploited by remote attackers to directly alter SQL query statements with the 'awardid' parameter...

Remote file inclusion

A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user...

HRSALE The Ultimate HRM 1.0.2 - (Authenticated) Cross-Site Scripting

Exploit Title: HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross Site Scripting Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10259 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested on: Kali Linux...

CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

UBUNTU-CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

OpenSSL Cache Timing Side Channel Attack Vulnerability

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

OpenSSL Denial of Service Vulnerability (CNVD-2018-06539 )

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A denial of service vulnerability exists in OpenSSL versions 1.1.0, 1.0.2, which stems from the use of recursively overloaded malicious input, constructed with an ASN.1 type that can...

Solaris 10 (x86) : 151913-11

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Jan/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid108228; scriptversion"1.4"; scriptcvsdate"Dat...

Solaris 10 (x86) : 151913-09

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Mar/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 151912-11

SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Jan/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid107753; scriptversion"1.4"; scriptcvsdate"Date:...

PYSEC-2018-114

Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors...

Remote code execution

Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors...

CVE-2018-0524

Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors...

PYSEC-2018-115

Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

Jubatus Arbitrary Code Execution Vulnerability

Jubatus is an online machine learning framework that runs in a distributed environment. A security vulnerability exists in Jubatus 1.0.2 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

Jubatus Directory Traversal Vulnerability

Jubatus is an online machine learning framework that runs in a distributed environment. A directory traversal vulnerability exists in Jubatus 1.0.2 and earlier versions. A remote person can exploit this vulnerability to read arbitrary files...