CVE-2013-3628

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability...

CVE-2013-3628

CVE-2013-3628 affects Zabbix 2.0.9, described as an Arbitrary Command Execution vulnerability. The connected documents confirm that an authenticated user can create and run scripts on a Zabbix host, enabling remote command execution on the server. Public exploitation is evidenced by references to...

CVE-2019-3628

Privilege escalation in McAfee Enterprise Security Manager ESM 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control...

CVE-2019-3628

CVE-2019-3628 affects McAfee Enterprise Security Manager (ESM) 11.x before 11.2.0. An authenticated user can exploit incorrect access control to escalate privileges and access a core system component. Impact is described as privilege escalation with access to core components; remediation is to up...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00112)

Intel Active Management Technology is prone to multiple buffer overflow and memory corruption vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2018-3628

CVE-2018-3628 describes a buffer overflow in the HTTP handler of Intel AMT/CSME firmware across versions 3.x–11.x that could let an attacker execute arbitrary code within the same subnet. Connected sources confirm the affected product family (Intel AMT/CSME firmware) and a remediation path via fi...

F5 Multiple Products iControl iCall Script Privilege Escalation (CVE-2015-3628)

A privilege escalation vulnerability exists in the iControl API in multiple F5 products. The vulnerability is due to insufficient validation of iCall scripts in incomming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending malicious SOAP requests to the serve...

CVE-2016-3628

CVE-2016-3628 affects TIBCO Enterprise Message Service (EMS) server (tibemsd) and EMS Appliance. A buffer overflow in tibemsd allows remote authenticated users to cause denial of service or potentially execute arbitrary code via crafted inbound data. Affected versions, per sources, are EMS before...

CVE-2015-3628

CVE-2015-3628 covers an authenticated privilege-escalation in the F5 iControl API (iCall) that allows a user with the Resource Administrator role to gain higher privileges via a crafted iCall script or handler in a SOAP request to iControl/iControlPortal.cgi. Technical details across connected do...

Use the F5 ICall scripting mention the right vulnerability analysis(CVE-2 0 1 5-3 6 2 8)-vulnerability warning-the black bar safety net

Earlier this year, GDS in F5 BIG-IP LTM found a loophole, this loophole allows limited user access to the system after the extraction and at the mention of the right after the successful remote execution of the command. This article will show you how to manually take advantage of this...

F5 iControl - 'iCall::Script' Root Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'nokogiri' class Metasploit3 "http://schemas.xmlsoap.org/soap/encoding/" STRINGATTRS = 'xsi:type' = 'urn:Common.StringSequence',...

F5 BIG-IP - iCall privilege escalation vulnerability CVE-2015-3628

F5 BIG-IP is prone to a privilege escalation vulnerability SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if...

F5 Networks BIG-IP : iCall privilege escalation vulnerability (K16728)

An authenticated user, with Resource Administrator role permissions, is able to use iCall scripts and associated handlers to create and modify user account properties. CVE-2015-3628 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

CVE-2014-3628 affects Apache Solr 4.x prior to 4.10.3, specifically the Admin UI Plugin / Stats page. The vulnerability is an XSS due to improper sanitization of data in the fieldvaluecache object, allowing a remote attacker to inject arbitrary script/HTML into a victim’s browser. The issue is do...

Zabbix Authenticated Remote Command Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...

openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...

CVE-2011-3628

Untrusted search path vulnerability in pammotd aka the MOTD module in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.0...

CVE-2011-3628

CVE-2011-3628 is an untrusted search path vulnerability in pam_motd (MOTD module) in libpam-modules. It affects Ubuntu releases where libpam-modules versions predating the listed fixes: before 1.1.3-2ubuntu2.1 on 11.10, before 1.1.2-2ubuntu8.4 on 11.04, before 1.1.1-4ubuntu2.4 on 10.10, before 1....