OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit

Exploit Title: SSHtranger Things Exploit Author: Mark E. Haase Vendor Homepage: https://www.openssh.com/ Software Link: download link if available Version: OpenSSH 7.6p1 Tested on: Ubuntu 18.04.1 LTS CVE : CVE-2019-6111, CVE-2019-6110 ''' Title: SSHtranger Things Author: Mark E. Haase Homepage:...

OpenSSH SCP Client - Write Arbitrary Files

''' Title: SSHtranger Things Author: Mark E. Haase Homepage: https://www.hyperiongray.com Date: 2019-01-17 CVE: CVE-2019-6111, CVE-2019-6110 Advisory: https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt Tested on: Ubuntu 18.04.1 LTS, OpenSSH client 7.6p1 We have nicknamed this...

MicroWorld Technologies eScan eScan Agent Application Access Control Error Vulnerability

MicroWorld Technologies eScan is a suite of antivirus software from MicroWorld, USA. It protects against spyware, malware, spam, etc. eScan Agent Application MWAGENT.EXE is one of the agent-side applications. An Access Control Error vulnerability exists in eScan Agent Application MWAGENT.EXE...

CVE-2018-18388

eScan Agent Application MWAGENT.EXE 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222...

Code injection

eScan Agent Application MWAGENT.EXE 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222...

CVE-2018-18388

eScan Agent Application MWAGENT.EXE 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222...

CVE-2018-18388

eScan Agent Application MWAGENT.EXE 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222...

grab.com XSS vulnerability

Vulnerable URL: https://www.grab.com/sg/press/tech-product/grab-create-5-million-micro-entrepreneurs-indonesia-2018/?" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2222 VIP website status:| Yes Check grab.com...

CVE-2017-2222

CVE-2017-2222 describes an XSS vulnerability in the WordPress WP-Members plugin affecting versions prior to 3.1.8. The primary description notes arbitrary script injection via unspecified vectors. Related sources consistently indicate the fix is to update to version 3.1.8 or later; some entries a...

CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

CVE-2016-2222

The vulnerability CVE-2016-2222 affects WordPress where the function wp_http_validate_url in wp-includes/http.php (older than 4.4.2) allows SSRF via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php. Impact per sources indicates potential server-side...

CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

WordPress < 4.4.2 Multiple Vulnerabilities

Binary data 9074.prm...

Debian DLA-418-1 : wordpress security update

WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar. CVE-2016-2221 Wordpress could be vulnerable for an open...

[SECURITY] [DLA 418-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u9 CVE ID : CVE-2016-2221 CVE-2016-2222 Debian Bug : 813697 WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open...

Debian DSA-3472-1 : wordpress - security update

Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2221 Shailesh Suthar discovered an open redirection vulnerability. - CVE-2016-2222 Ronni Skansing discovered a server-side request...

[SECURITY] [DSA 3472-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3472-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3472-1 (wordpress - security update)

Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2221 Shailesh Suthar discovered an open redirection vulnerability. CVE-2016-2222 Ronni Skansing discovered a server-side request...

DSA-3472-1 wordpress - security update

Bulletin has no description...

Amazon Linux: Security Advisory (ALAS-2015-537)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...