CVE-2013-5357

Google Picasa

Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)

A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...

Ektron 8.02 - XSLT Transform Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

Ektron 8.02 XSLT Transform Remote Code Execution

This Metasploit module exploits a vulnerability in Ektron CMS 8.02 before SP5. The vulnerability exists due to the insecure usage of XslCompiledTransform, using a XSLT controlled by the user. The module has been tested successfully on Ektron CMS 8.02 over Windows 2003 SP2, which allows to execute...

Ektron 8.02 XSLT Transform Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

CVE-2012-5357

creationtimestamp| type| source ---|---|--- 2012-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23155 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ektronxsltexec.rb 2025-02-06 03:13:40+00:00| seen|...

Vulnerabilities in Ektron CMS Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of two vulnerabilities affecting Ektron Web Content Management System CMS. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Ektron. Ektron...

Trojan/Backdoor - Arugizer Detection

Binary data 5357.prm...

Microsoft Windows WSDAPI服务远程内存破坏漏洞（MS09-063）

BUGTRAQ ID: 36919 CVE ID: CVE-2009-2512 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中设备API上Web服务（WSDAPI）中存在内存破坏漏洞。远程攻击者可以通过向WSDAPI服务发送带有畸形头的WSD消息触发这个漏洞，导致在用户系统上执行任意指令。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 SP2 Microsoft Window...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

SLES10: Security update for IBM Java 1.4.2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-ibm java-142-ibm-devel java-142-ibm-jdbc java-142-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 10 patch...

SLES11: Security update for IBM Java 1.6.0

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-160-ibm java-160-ibm-alsa java-160-ibm-fonts java-160-ibm-jdbc java-160-ibm-plugin More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for IBM Java5 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040565 within...

SLES9: Security update for IBM Java2 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-JRE IBMJava2-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for IBM Java5 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

RHEL 5 : java-1.5.0-sun (RHSA-2008:1025)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1025 advisory. - Java Web Start File Inclusion via System Properties Override CVE-2008-2086 - JavaWebStart allows unauthorized network connections...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-7.b12.fc10 (2008-10913)

OpenJDK security patches applied. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

RedHat Security Advisory RHSA-2009:0369

The remote host is missing updates announced in advisory RHSA-2009:0369. The IBM® 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...