132 matches found
CVE-2021-1821
CVE-2021-1821 is a logic issue in Apple OS components (notably networking-related paths) that was mitigated by state-management fixes. The vulnerability allowed denial of service when a user visited a malicious webpage, and Apple patched it in watchOS 7.6 and macOS Big Sur 11.5. The Apple securit...
Cisco Prime Infrastructure Health Monitor tar file directory traversal
Added: 11/25/2019 CVE: CVE-2019-1821 BID: 108339 Background Cisco Prime Infrastructure is a management system of wireless and wired networks. Problem A vulnerability in Cisco Prime Infrastructure Health Monitor allows a remote attacker to execute arbitrary commands by uploading a specially crafte...
Cisco Prime Infrastructure Health Monitor tar file directory traversal
Added: 11/25/2019 CVE: CVE-2019-1821 BID: 108339 Background Cisco Prime Infrastructure is a management system of wireless and wired networks. Problem A vulnerability in Cisco Prime Infrastructure Health Monitor allows a remote attacker to execute arbitrary commands by uploading a specially crafte...
Cisco Multiple Products Remote Code Execution (CVE-2019-1821)
A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability', 'Description' = %q This module exploits a vulnerability...
CVE-2019-1821
creationtimestamp| type| source ---|---|--- 2019-05-16 18:58:50+00:00| seen| https://t.me/informationsecuritychannel/27576 2019-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47686 2019-06-19 16:07:26+00:00| seen|...
CVE-2019-1821 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because t...
CVE-2019-1821
CVE-2019-1821 affects Cisco Prime Infrastructure (PI) / Evolved Programmable Network Manager (EPNM) Health Monitor HA components. The issue is a TarArchive Directory Traversal in the Health Monitor’s upload path that allows a remote attacker to trigger arbitrary commands via the UploadServlet (th...
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow a remote attacker to gain the ability to execute arbitrary code with elevated privileges on the underlying operating system. One of these...
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability
This module exploits a vulnerability found in Cisco Prime Infrastructure. The issue is that the TarArchive Java class the HA Health Monitor component uses does not check for any directory traversals while unpacking a Tar file, which can be abused by a remote user to leverage the UploadServlet cla...
IBM Operational Decision Manager External Entity Injection (CVE-2018-1821)
An XML external entity XXE injection vulnerability exist in IBM Operational Decision. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XML file with...
Security Bulletin: IBM Operational Decision Manager is affected by CVE-2018-1821 vulnerability
Summary IBM Operational Decision Manager has addressed the vulnerability CVE-2018-1821 Vulnerability Details CVEID: CVE-2018-1821 DESCRIPTION: IBM Operational Decision Manager is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit thi...
IBM Operational Decision Manager 8.x - XML External Entity Injection
IBM Operational Decision Manager 8.x - XML External Entity Injection Exploit Title: XML External Entity Injection XXE Date: 2018-12-18 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www-01.ibm.com/support/docview.wss?uid=ibm10744149 Version: v8.6 - v8.7 - v8.8 ...
CVE-2018-1821
creationtimestamp| type| source ---|---|--- 2018-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46017...
IBM Operational Decision Manager 8.x - XML External Entity Injection
Exploit for multiple platform in category web applications Exploit Title: XML External Entity Injection XXE Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www-01.ibm.com/support/docview.wss?uid=ibm10744149 Version: v8.6 - v8.7 - v8.8 - v8.9 REQUIRED Tested on:...
IBM Operational Decision Manager 8.x XML Injection
Exploit Title: XML External Entity Injection XXE Date: 2018-12-18 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www-01.ibm.com/support/docview.wss?uid=ibm10744149 Version: v8.6 - v8.7 - v8.8 - v8.9 REQUIRED Tested on: Windows 10 CVE : CVE-2018-1821 POC1: Port...
CVE-2018-1821
CVE-2018-1821 affects IBM Operational Decision Manager (ODM) versions 8.5–8.9, with a XML External Entity (XXE) processing vulnerability that could disclose files or exhaust memory. The IBM advisory/ODM bulletin notes proposed fixes for ODM v8.6–8.9 (interim fixes: 8.6.0.3-WS-ODM_DS-IF035, 8.7.1....
CVE-2018-1821
IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150170...
CVE-2017-1821
According to the Pixel/Nexus Security Bulletin for July 2018, CVE-2017-1821 is recorded under the Kernel components with type Elevation of Privilege (EoP) and is associated with the Ethernet component in the upstream Linux kernel. The entry confirms affected context as part of the upstream kernel...