87 matches found
Debian DSA-4688-1 : dpdk - security update
Multiple vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code by malicious guests/containers. C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2017-4688
CVE-2017-4688 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-4688
...
pfSense 2.1.3 status_rrd_graph_img.php Command Injection
!/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/ Version: =2.1.3 Tested on: FreeBSD 8.3-RELEASE-p16 CV...
pfSense < 2.1.4 - status_rrd_graph_img.php Command Injection Exploit
Exploit for php platform in category web applications !/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/...
pfSense 2.1.4 - status_rrd_graph_img.php Command Injection
pfSense 2.1.4 - statusrrdgraphimg.php Command Injection !/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/ol...
pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection
!/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/ Version: =2.1.3 Tested on: FreeBSD 8.3-RELEASE-p16 CV...
CVE-2015-4688
Ellucian Banner Student versions 8.5.1.2 through 8.7 are affected by CVE-2015-4688, allowing remote attackers to enumerate user accounts via a series of requests. The available connected records confirm the product (Ellucian Banner Student) and the impact (account enumeration). No explicit root-c...
Intrusion Detection Avoidance Payload Generator: NPS_Payload
This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn @Spoonman1091 Payload written by Ben Mauch @Ben0xA aka dirtyben. This tool provides a way to generate a PowerShell payloa...
CVE-2016-4688
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute...
About the security content of iOS 10.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of iOS 10.1
About the security content of iOS 10.1 This document describes the security content of iOS 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...
About the security content of watchOS 3.1
About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of tvOS 10.0.1
About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
PfSense命令注入漏洞
漏洞简介 该漏洞的编号为CVE-2014-4688，存在于PfSense的2.1.3以及更低版本中。该漏洞源于php程序中没有对用户的输入值进行严格的校验，导致用户恶意输入达到命令执行函数时会产生严重后果。其中，diagdns.php， diagsmart.php， statusrrdgraphimg.php三个脚本文件受到该漏洞的影响。 漏洞分析 在diagdns.php中，用户提交的host值经过处理后将传到dig变量中执行。攻击者通过构造host值执行任意命令。...
PfSense command injection vulnerability analysis-vulnerability warning-the black bar safety net
In this article, we will introduce in PfSense 2. 1. 3 and the lower version in the CVE-2 0 1 4-4 6 8 8 vulnerability; the higher the version, pfSense has fixed this vulnerability. 0x01 Diagdns. php script command injection vulnerability Shown below is the script diagdns. in php there is a command...
Microsoft security advisory: Update to improve Windows command-line auditing: February 10, 2015
None None...
CVE-2014-4688
PfSense
Microsoft Services MS06-066 nwwks.dll
No description provided by source. $Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2013-4688
CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...