73 matches found
NPMJS gitlabhook 0.0.17 - repository Remote Command Execution
NPMJS gitlabhook 0.0.17 - repository Remote Command Execution Exploit Title: NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution Date: 2019-09-13 Exploit Author: Semen Alexandrovich Lyhin Vendor Homepage: https://www.npmjs.com/package/gitlabhook Version: 0.0.17 Tested on: Kali Linux 2...
NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution
Exploit Title: NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution Date: 2019-09-13 Exploit Author: Semen Alexandrovich Lyhin Vendor Homepage: https://www.npmjs.com/package/gitlabhook Version: 0.0.17 Tested on: Kali Linux 2, Windows 10. CVE : CVE-2019-5485 !/usr/bin/python import...
CVE-2019-5485
The CVE-2019-5485 issue affects the npm package gitlabhook v0.0.17, where the repository.name field in a POST body is concatenated into an exec call without sanitization, enabling remote code execution. Exploit examples in connected data show an attacker can inject commands (e.g., creating /tmp/p...
Access Restriction Bypass
The Conga project is a management system for remote workstations. It consists of luci, which is a secure web-based front end, and ricci, which is a secure daemon that dispatches incoming messages to underlying management modules. It was discovered that Plone, included as a part of luci, did not...
Information Disclosure
The Conga project is a management system for remote workstations. It consists of luci, which is a secure web-based front end, and ricci, which is a secure daemon that dispatches incoming messages to underlying management modules. It was discovered that Plone, included as a part of luci, did not...
Photon OS 1.0: Tcpdump PHSA-2017-0004 (deprecated)
An update of tcpdump packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0004. The text itself is copyright C VMware, Inc...
CVE-2018-5485
NetApp OnCommand Unified Manager for Windows versions 7.2–7.3 contain an elevation of privilege vulnerability. This is documented in multiple sources (NVD/CNVD) with the vulnerability described as allowing privilege escalation on affected Windows installations. The documents do not provide the ex...
F5 Networks BIG-IP : tcpdump vulnerabilities (K31997425)
CVE-2017-5482 The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575. CVE-2017-5483 The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse. CVE-2017-5484 The ATM parser in tcpdump before...
EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...
EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...
Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20170801)
The following packages have been upgraded to a later upstream version: tcpdump 4.9.0. Security Fixes : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send special...
RedHat Update for tcpdump RHSA-2017:1871-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-5485
CVE-2016-5485 is explicitly labeled as rejected in the primary CVE records (DO NOT USE THIS CANDIDATE NUMBER; no vulnerability linked). Connected data adds a separate OracleVM Nessus entry (OVMSA-2016-0151) describing missing patches for OracleVM 3.3/3.4 and a related flaw affecting ovm-consoled ...
CVE-2008-5485
CVE-2008-5485 is rejected/not used and does not represent an active vulnerability entry.
SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)
This update for tcpdump fixes the following issues: Security issues fixed bsc1020940 : - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compresse...
CVE-2017-5485
CVE-2017-5485 : tcpdump before 4.9.0 contains a buffer overflow in the ISO CLNS parser (addrtoname.c:lookup_nsap). The vulnerability allows remote attackers to potentially execute arbitrary code or crash the application by crafting overly long inputs. Public advisories confirm the issue as part o...
