32 matches found
CVE-2019-15642
CVE-2019-15642 Webmin 원격 코드 실행 인증됨 python 사용법: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 Webmin용 docker cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin 사용자명=root, 비밀번호=root ⚡ root@jas502n /vulhub/webmin/CVE-2019-15107 ...
Devolutions Server <= 2026.1.22 / 2026.2.0 <= 2026.2.11 Multiple Vulnerabilities (DEVO-2026-0024)
The version of Devolutions Server installed on the remote host is prior or equal to 2026.1.22 or 2026.2.0 prior or equal to 2026.2.11. It is, therefore, affected by multiple vulnerabilities, including: - Improper authorization in the access request status endpoint allows an authenticated...
CVE-2026-15642
creationtimestamp| type| source ---|---|--- 2026-07-26 16:33:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrksopm3nq2o...
CVE-2025-15642
creationtimestamp| type| source ---|---|--- 2026-06-17 06:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohps3rn4k2f...
CVE-2025-15642
The CVE-2025-15642 entry concerns Netskope Client for Windows. The issue is described as weak discretionary access control lists on the Netskope Client service object and related registry keys, allowing a malicious insider with admin privileges to bypass NSClient Tamper Protections. Affected: Net...
CVE-2019-15642
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
Linux Distros Unpatched Vulnerability : CVE-2017-15642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. CVE-2017-15642...
RHEL 5 : sox (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sox: buffer overflow read vulnerability CVE-2021-3643 - The startread function in wav.c in Sound eXchange...
CVE-2019-15642
creationtimestamp| type| source ---|---|--- 2023-11-17 05:26:25+00:00| seen| https://t.me/arpsyndicate/209 2024-12-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-25 2025-01-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...
Mageia: Security Advisory (MGASA-2018-0211)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2021-1850)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2021-1231)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : sox (EulerOS-SA-2021-1231)
According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound...
CVE-2020-15642
The CVE-2020-15642 issue affects Marvell QConvergeConsole 5.5.0.64. The root cause is a lack of proper validation in the isHPSmartComponent method of the GWTTestServiceImpl class, enabling a crafted user string to be used in a system call. This permits remote code execution with SYSTEM privileges...
mildronat.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-995926 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting mildronat.ru website and it...
Webmin rpc.cgi Remote Code Execution (CVE-2019-15642)
A remote code execution vulnerability exists in Webmin rpc.cgi. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2019-15642
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
CVE-2019-15642
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
CVE-2019-15642
CVE-2019-15642 : Webmin
Debian DLA-1695-1 : sox security update
Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program : CVE-2017-15370 The ImaAdpcmReadBlock function src/wav.c is affected by a heap buffer overflow. This vulnerability might be leveraged by remote attackers using a crafted WAV file to cause denial of...