CVE-2019-20385

The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...

Design/Logic Flaw

The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...

CVE-2019-20385

The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...

CVE-2019-20385: Unrestricted Upload of File with Dangerous Type

The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...

ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

PT-2020-10412

Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012 Description The issue concerns the CSV upload feature in the /supervisor/procesa carga.php file, which allows the upload of .php files with a text/ content type. The uploaded PHP code can then be executed by...

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4535673)

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4535673 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4535674)

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4535674 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

Unspecified Vulnerability in Logaritmo Aware CallManager

Logaritmo Aware CallManager is an enterprise telephone call management system. A security vulnerability exists in the CSV upload feature of the /supervisor/procesacarga.php file in the 2012 version of Logaritmo Aware CallManager, which can be exploited by an attacker accessing the /supervisor/csv...

Servicing stack update for Windows Server 2012: December 10, 2019

Servicing stack update for Windows Server 2012: December 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system before...

Microsoft .NET Framework Multiple RCE Vulnerabilities (KB4535104)

This host is missing a critical security update according to Microsoft KB4535104 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2012-0070

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:23+00:00| seen| https://t.me/cibsecurity/9205...

CVE-2012-0334

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:22+00:00| seen| https://t.me/cibsecurity/9204...

CVE-2012-0945

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:21+00:00| seen| https://t.me/cibsecurity/9203...

CVE-2012-1316

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:20+00:00| seen| https://t.me/cibsecurity/9202...

CVE-2012-1562

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:18+00:00| seen| https://t.me/cibsecurity/9200...

CVE-2012-1563

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:17+00:00| seen| https://t.me/cibsecurity/9199...

CVE-2012-0070

spamdyke prior to 4.2.1: STARTTLS reveals plaintext...

CVE-2012-0070

CVE-2012-0070 concerns spamdyke prior to 4.2.1, where the TLS upgrade path after STARTTLS does not properly clear transport buffers, allowing insertion of arbitrary plaintext during the plaintext phase (e.g., SMTP commands). The vulnerability is triggered during the plaintext-to-TLS transition an...

CVE-2012-1326

CVE-2012-1326 affects Cisco IronPort Web Security Appliance (WSA) up to and including version 7.5, where the software does not properly validate the basic constraints of the certificate authority in SSL/TLS. This misconfiguration could allow an unauthenticated, remote attacker to perform man‑in‑t...