9 matches found
CVE-2019-15639
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario...
CVE-2020-15639
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decryptFile method of the FlashValidatorServiceImpl class. The iss...
Marvell QConvergeConsole (QCC) FlashValidatorServiceImpl decryptFile Path Traversal RCE
The Marvell QConvergeConsole GUI running on the remote host is affected by a path traversal vulnerability in the decryptFile method of the FlashValidatorServiceImpl class in the FlashValidator web application. An unauthenticated, remote attacker can exploit this, via specially crafted messages, t...
CVE-2020-15639
CVE-2020-15639 affects Marvell QConvergeConsole 5.5.0.64. The issue is a path-validation flaw in decryptFile (FlashValidatorServiceImpl) allowing unauthenticated remote code execution with SYSTEM privileges. Connected documents (ZDI-20-967, Red Hat, CNVD, etc.) confirm a directory-traversal/RCE i...
CVE-2019-15639
Technical details about CVE-2019-15639 are not publicly provided in the connected documents. Affected versions and exploitation specifics are not elaborated here; monitor for updates.
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection Vulnerabilities
Exploit for unknown platform in category web applications Exploit Title: Mura CMS before 6.2 SSRF + XXE Date: 30-10-2017 Exploit Author: Anthony Cole Vendor Homepage: http://www.getmura.com/ Version: before 6.2 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on:...
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection
Exploit Title: Mura CMS before 6.2 SSRF + XXE Date: 30-10-2017 Exploit Author: Anthony Cole Vendor Homepage: http://www.getmura.com/ Version: before 6.2 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on: Windows 2008 w/ Coldfusion 8 CVE: CVE-2017-15639 Category:...
CVE-2017-15639
CVE-2017-15639 affects Mura CMS before 6.2. The readRSS.cfm file can be abused to bypass access restrictions via the draggable feeds feature. Exploitation details are documented (e.g., SSRF/XXE vectors) and public exploit references exist. The remedy is to upgrade to Mura CMS 6.2 or later or appl...