Sitecore 8.x Deserialization Remote Code Execution

Exploit Title: Sitecore v 8.x Deserialization RCE Date: Reported to vendor October 2018, fix released April 2019. Exploit Author: Jarad Kopf Vendor Homepage: https://www.sitecore.com/ Software Link: Sitecore downloads: https://dev.sitecore.net/Downloads.aspx Version: Sitecore 8.0 Revision 150802...

Sitecore 8.x - Deserialization Remote Code Execution

Exploit Title: Sitecore v 8.x Deserialization RCE Date: Reported to vendor October 2018, fix released April 2019. Exploit Author: Jarad Kopf Vendor Homepage: https://www.sitecore.com/ Software Link: Sitecore downloads: https://dev.sitecore.net/Downloads.aspx Version: Sitecore 8.0 Revision 150802...

CVE-2019-11080

Sitecore Experience Platform (XP) prior to 9.1.1 is affected by a deserialization-based remote code execution vulnerability (CVE-2019-11080). An authenticated user with the required permissions can remotely execute OS commands by sending a crafted serialized object. Public sources (including Red ...

CVE-2018-11080

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially...

CVE-2018-11080

Affected product: Dell EMC ESRS (Secure Remote Services) / ESRS Virtual Edition. Vulnerability: Improper file permissions in multiple configuration files that are world-readable, enabling an authenticated attacker to access file contents and potentially elevate privileges. Versions impacted: ESRS...

CVE-2018-11080

creationtimestamp| type| source ---|---|--- 2018-10-17 15:49:14+00:00| seen| MISP/5bc75933-2fc0-4617-a5af-0bef0a021402...

CVE-2017-11080

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied sparse image, a buffer overflow vulnerability could occur if the sparse header block size is equal to 4294967296...

CVE-2017-11080

CVE-2017-11080 is a local buffer overflow vulnerability described for Android on MSM/CAF platforms (Linux kernel path) when processing a user-supplied sparse image and the sparse header block size equals 4294967296. The issue affects Qualcomm bootloader components as mapped in the CVE references,...

Information disclosure

Remote Manager in Open Enterprise Server OES allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to...