Command injection

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221...

CVE-2011-0382: Improper Neutralization of Special Elements used in an OS Command

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221...

PT-2011-2304

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Description The issue allows remote attackers to execute arbitrary commands on the device. This is related to a command injection vulnerability in the CGI subsystem when a request...

ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability

ZDI-11-088: Cisco Security Agent Management stupload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-088 February 16, 2011 -- CVE ID: CVE-2011-0364 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco Security Agent...

Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability Advisory ID: cisco-sa-20110216-csa Revision 1.0 For Public Release 2011 February 16 1600 UTC GMT...

Cisco Security Agent Management Console st_upload File Creation

The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC...

Cisco Security Agent Management st_upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Security Agent Management Console. Authentication is not required to exploit this vulnerability. The flaw exists within the webagent.exe component which is handed requests by an Apache instan...

Symantec Web Gateway Management Interface USERNAME Blind SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the management interface which listens by default on TCP port 443. While parsing...

CVE-2010-3036

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port 1 443 or 2 1741, aka Bug ID CSCti41352...

PT-2010-4508

Name of the Vulnerable Software and Affected Versions CiscoWorks Common Services versions prior to 4.0 Description The issue is related to multiple buffer overflows in the authentication functionality of the web-server module. This allows remote attackers to execute arbitrary code via a session o...

CVE-2010-3036: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port 1 443 or 2 1741, aka Bug ID CSCti41352...

ZDI-10-121: Command Injection Remote Code Execution Vulnerability

ZDI-10-121: Command Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-121 July 13, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- Vulnerability Details: This vulnerability allows...

Oracle Secure Backup Web Interface Various Post-Auth Command Injection Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit these vulnerabilities. The specific flaws exist due to how the application passes CGI parameters to the internal obtool binary runnin...

Check SSL on Apache

This script checks if SSL on Port 443 on an Apache Server enabled. OpenVAS Vulnerability Test $Id: GSHBApacheSSL.nasl 7061 2017-09-05 11:50:40Z teissa $ Check if Port 443 on an Apache Server, SSL enabled Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Check SSL on Apache

This script checks if SSL on Port 443 on an Apache Server enabled. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability

ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-078 April 23, 2010 -- Affected Vendors: Novell -- Affected Products: Novell Zenworks -- TippingPointTM IPS Customer Protection: TippingPoint IP...

Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability but an attacker must be authenticated. The specific flaw exists in the handling of various variables to the...

Oracle Secure Backup Administration Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the logic used to authenticate a user to the administration server running on port...

Ubuntu: Security Advisory (USN-443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux/x86 - chmod(/etc/shadow, 0666) + ASCII Shellcode (443 bytes)

Linux/x86 - chmod/etc/shadow, 0666 + ASCII Shellcode 443 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 chmod/etc/shadow, 0666 ASCII Shellcode 443 Bytes | Type: Shellcode | Author: agix | Platform: Linux X86 / include char shellcode = "LLLLhHEY!X5HEY!"...