Fitnesse Wiki - Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits a vulnerability found in Fitnesse Wiki, version...

Fitnesse Wiki 20131110 Remote Command Execution

Vulnerability title: Remote Command Execution in Fitnesse Wiki CVE: CVE-2014-1216 Vendor: Fitnesse Product: Wiki Affected version: v20131110 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: The Fitnesse wiki does not validate the syntax of edited pages to validate whether the...

Fitnesse Wiki 20131110 Remote Command Execution

Fitnesse Wiki 20131110 suffers from a remote command execution vulnerability. Vulnerability title: Remote Command Execution in Fitnesse Wiki CVE: CVE-2014-1216 Vendor: Fitnesse Product: Wiki Affected version: v20131110 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: The Fitness...

CVE-2012-4036

Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged b...

Unrestricted file upload

Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged b...

CVE-2012-4036

PBBoard 2.1.4 is affected by an unrestricted file upload in admin.php that lets remote admins upload a file with an executable extension to the addons directory and access it directly, potentially executing arbitrary PHP code. This vulnerability is tied to CVE-2012-4036 and can be leveraged via C...

PBBoard 2.1.4 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2012-1216

PBBoard 2.1.4 and likely earlier versions have multiple vulnerabilities tied to CVE-2012-1216: a CSRF flaw in admin.php that can hijack administrator sessions to perform actions (e.g., file upload via add action or file content modification via edit action), and it is linked to other issues (CVE-...

Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)

The file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by multiple buffer overflow vulnerabilities that can be triggered when handling attachments of various types. By sending an email with a specially...

Multi-Vendor Autonomy Verity Keyview Filter Multiple Issues

SUMMARY Multiple sources have identified several security issues in Autonomys Verity Keyview Content Filter libraries. Symantec has updated the Keyview modules being shipped with Symantec products to address these issues. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|---...

Ubuntu: Security Advisory (USN-1216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-ec2 USN-1216-1

Ubuntu Update for Linux kernel vulnerabilities USN-1216-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12161.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ec2 USN-1216-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities (Windows)

This host has IBM Lotus Notes installed and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotusnotesmultbofvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

CVE-2011-1216

CVE-2011-1216 is a stack-based buffer overflow in Autonomy KeyView’s Verity/assr.dll used by IBM Lotus Notes before 8.5.2 FP3. An attacker could trigger arbitrary code execution by crafting tag data in an Applix spreadsheet attachment, leading to remote code execution under the Notes process. The...

CVE-2010-1216

The CVE-2010-1216 entry concerns PHP remote file inclusion in notsoPureEdit prior to or including version 1.4.1, triggered when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the content parameter, via a crafted request to tem...

CVE-2010-1216

creationtimestamp| type| source ---|---|--- 2010-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11832...

Mandriva Update for krb5 MDKSA-2007:077 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDKSA-2007:077 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDKSA-2007:077-1 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDKSA-2007:077-1 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-1216

Multiple unspecified vulnerabilities in 1 unlzh.c and 2 unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications SUA; as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before...

CVE-2009-1216

CVE-2009-1216 concerns multiple unspecified vulnerabilities in the gzip library components unlzh.c and unpack.c. Affected products/labels in the provided documents include Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA), wi...