CVE-2013-3631

NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature. NOTE: this issue might not be a vulnerability, since it appears to be part of legitimate, intentionally-exposed functionality b...

CVE-2013-3631

CVE-2013-3631 affects NAS4Free 9.1.0.1.804 and earlier. A remotely authenticated user can post PHP code to the exec.php endpoint ("Advanced | Execute Command") and have it executed, effectively enabling remote code execution. CERT notes NAS4Free runs as root by default, so code execution could oc...

NAS4Free - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'rexml/document' class Metasploit4 'NAS4Free Arbitrary Remote Code Execution', 'Description' = %q NAS4Free allows an authenticated...

CVE-2013-3631

creationtimestamp| type| source ---|---|--- 2013-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29320 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/nas4freephpexec.rb 2025-02-06 03:13:41+00:00| seen|...

NAS4Free version 9.1.0.1 contains a remote command execution vulnerability

Overview NAS4Free version 9.1.0.1.804 and possibly earlier versions contain a remote code execution vulnerability CWE-94. Description CWE-94: Improper Control of Generation of Code 'Code Injection' NAS4Free version 9.1.0.1.804 and possibly earlier versions contain a remote code execution...

NAS4Free Arbitrary Remote Code Execution

NAS4Free allows an authenticated user to post PHP code to a special HTTP script and have the code executed remotely. This module was successfully tested against NAS4Free version 9.1.0.1.804. Earlier builds are likely to be vulnerable as well. Module Options msf use...

Oracle Linux 4 : wireshark (ELSA-2006-0726 / ELSA-2006-0658 / ELSA-2006-0602)

New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Users of Wireshark should upgrade to these updated packag...

CVE-2012-3631

CVE-2012-3631 is a WebKit/Safari vulnerability reported for Apple devices prior to Safari 6.0, where multiple memory corruption issues in WebKit could be triggered by visiting a crafted website, potentially allowing arbitrary code execution or a denial of service. The connected Apple advisory not...

Fedora 15 : hardlink-1.0-12.fc15 (2011-14753)

fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : hardlink-1.0-12.fc16 (2011-14727)

fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7181)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...

SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3272 / 3273)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...

SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3268 / 3270)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...

openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...

openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...

Adobe Acrobat and Reader Array Indexing Remote Code Execution

Exploit for macOS platform in category dos / poc ============================================================= Adobe Acrobat and Reader Array Indexing Remote Code Execution ============================================================= Affected Vendor: Adobe Affected Product: Adobe Reader 9.3.4 fo...

CVE-2010-3631

creationtimestamp| type| source ---|---|--- 2010-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15212...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1926-1] New TYPO3 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1926-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 4, 2009 http://www.debian.org/security/faq -...

CVE-2009-3631

CVE-2009-3631 affects TYPO3 Backend: the Backend subcomponent allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename when the DAM extension or ftp upload is enabled. Affected versions span TYPO3 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before ...