Code injection

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

CVE-2014-0229

Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1 (and Cloudera CDH 5.0.x before 5.0.2) fail to check authorization for HDFS admin commands refreshNamenodes, deleteBlockPool, and shutdownDatanode. This allows remote authenticated users to cause DataNodes to shut down or perform unnecessary...

CVE-2014-0229

Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the 1 refreshNamenodes, 2 deleteBlockPool, and 3 shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service DataNode...

CVE-2014-9915

Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service application crash via a crafted 8BIM profile...

CVE-2014-9915

ImageMagick prior to 6.6.0-4 contains an off-by-one error in the 8BIM profile, which can be exploited remotely to cause a denial of service (application crash). The connected documents confirm the affected product and flaw details; exploitation specifics and remediation are not provided in the su...

CVE-2014-7279

The CVE-2014-7279 entry corresponds to an Authentication Bypass in Konke Smart Plug K. Affected device/session: Konke Smart Plug K; vulnerability exploited via TELNET on port 23 without authentication, allowing remote attackers to obtain equipment management authority (full control). The availabl...

GIT 1.8.5.6 / 1.9.5 / 2.0.5 / 2.1.4/ 2.2.1 & Mercurial < 3.2.3 - Exploit

Exploit for multiple platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Malicious Git and Mercurial HTTP Server For CVE-2014-9390',...

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts ClassLoader Manipulation Remote Code Execution',...

Centreon < 2.5.1 / Centreon Enterprise Server < 2.2 - SQL Injection / Command Injection Exploi

Exploit for linux platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon SQL and Command Injection', 'Description' = %q This module...

DEBIAN-CVE-2014-9835

Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file...

CVE-2014-9838

magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service crash...

CVE-2014-9840

ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds access via a crafted palm file...

CVE-2014-9833

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file...

UBUNTU-CVE-2014-9832

Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file...

CVE-2014-9839

magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds access...

CVE-2014-9834

Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file...

CVE-2014-9835

CVE-2014-9835 describes a heap overflow in ImageMagick 6.8.9-9 triggered by processing a crafted WPF file. Connected sources confirm the same vulnerable version and issue, with references noting a crash/overflow scenario in ImageMagick when handling WPF input. The available documents do not provi...

CVE-2014-9833

CVE-2014-9833: Heap overflow in ImageMagick 6.8.9-9 triggered by a crafted PSD file. Affected component: ImageMagick PSD handling. Root cause: heap overflow. Exploitation details are not provided in the supplied documents. Remediation/patch availability is not stated in the connected documents.

CVE-2014-9840

ImageMagick 6.8.9-9 is affected by CVE-2014-9840. A crafted palm file can trigger out-of-bounds access, causing a denial of service. The incident is described across multiple sources (e.g., CNVD entry for palm file DoS). The connected documents do not provide a vendor patch version or explicit re...

CVE-2014-9832

ImageMagick 6.8.9-9 is affected by a heap overflow when parsing a crafted PCX file (CVE-2014-9832). The issue involves heap/memory handling in ImageMagick’s PCX parsing path and is corroborated by CNVD and OSV entries. The connected documents provide the vulnerability description but do not inclu...