Privilege escalation

An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. A read-only user can...

PT-2020-6552 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions after 4.5-rc1 Description: A flaw was found in the Linux Kernel in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

Release Notes for Veeam Backup & Replication 9.5 Update 4b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...

Design/Logic Flaw

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5 allows Local File Inclusion via the FileDesc parameter...

CVE-2019-11397

The CVE-2019-11397 issue affects Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5. The GetFile.aspx handler exposes a Local File Inclusion (LFI) vulnerability via the FileDesc parameter, enabling an attacker to access local files. Impact is documented as ...

CVE-2019-11397

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5 allows Local File Inclusion via the FileDesc parameter...

PT-2019-12282 · Microsoft +1 · .Net Framework +1

Name of the Vulnerable Software and Affected Versions: Rapid4 RapidFlows Enterprise Application Builder version 4.5M.23 Description: The issue allows for Local File Inclusion via the FileDesc parameter in the GetFile.aspx file. This can be exploited when the software is used with .NET Framework...

CVE-2019-1568

Cross-site scripting XSS vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrary JavaScript or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrary JavaScript or HTML...

CVE-2019-1568

Cross-site scripting XSS vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrary JavaScript or HTML...

Rockwell Automation 1336 PLUS II Drv 4.5 A, 230V 1336F-A001 T Smart MCC

Binary data 754159.prm...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

CVE-2019-8436

CVE-2019-8436 affects imcat 4.5 and is caused by Stored XSS via the root/run/adm.php fm[instop][note] parameter. The connected sources consistently report this vulnerability without providing specific patch details or affected product revisions beyond imcat 4.5. The exploitation, scope, and remed...

CVE-2019-8436

imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...

Information Disclosure

qemu-kvm-rhev is vulnerable to information disclosure attacks. The vulnerability exists as the C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

eBrigade ERP 4.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: eBrigade ERP 4.5 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://ebrigade.net/ Software Link: https://netcologne.dl.sourceforge.net/project/ebrigade/ebrigade/eBrigade%204.5/ebrigade4.5.zip Version: 4.5...

eBrigade ERP 4.5 - Arbitrary File Download Exploit

Exploit for php platform in category web applications !/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @email protected | eBrigade...

eBrigade ERP 4.5 Arbitrary File Download

!/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @-------------------------------------------------------------@ | eBrigade ERP "...

eBrigade ERP 4.5 SQL Injection

Exploit Title: eBrigade ERP 4.5 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://ebrigade.net/ Software Link: https://netcologne.dl.sourceforge.net/project/ebrigade/ebrigade/eBrigade%204.5/ebrigade4.5.zip Version: 4.5 Category: Webapps Tested on:...