CVE-2017-5531

CVE-2017-5531 affects TIBCO Managed File Transfer Command Center (CC) and Managed File Transfer Internet Server (IS) versions 8.0.0 and 8.0.1. The issue may allow any authenticated user to gain administrative control of the Managed File Transfer web applications via the Administrator Service. In ...

CVE-2016-5531

CVE-2016-5531 affects Oracle WebLogic Server (Oracle Fusion Middleware) 10.3.6.0, 12.1.3.0, and 12.2.1.0, where the WLS-WebServices subcomponent contains an unspecified vulnerability that allows a remote attacker to compromise confidentiality, integrity, and availability. The issue is classified ...

Elasticsearch < 1.6.1 Multiple Vulnerabilities - Windows

Elasticsearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:elasticsearch";...

ElasticSearch Snapshot API Directory Traversal

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 'ElasticSearch Snapshot API Directory Traversal', 'Description' = %q This module exploits a directory traversal...

ElasticSearch 1.6.0 - Arbitrary File Download

ElasticSearch 1.6.0 - Arbitrary File Download elasticpwn Script for ElasticSearch url path traversal vuln. CVE-2015-5531 crg@fogheaven elasticpwn$ python CVE-2015-5531.py exploitlab.int /etc/hosts !dSR script for CVE-2015-5531 127.0.0.1 localhost The following lines are desirable for IPv6 capable...

ElasticSearch 1.6.0 - Arbitrary File Download Vulnerability

Exploit for linux platform in category web applications elasticpwn Script for ElasticSearch url path traversal vuln. CVE-2015-5531 email protected elasticpwn$ python CVE-2015-5531.py exploitlab.int /etc/hosts !dSR script for CVE-2015-5531 127.0.0.1 localhost The following lines are desirable for...

ElasticSearch 1.6.0 - Arbitrary File Download

elasticpwn Script for ElasticSearch url path traversal vuln. CVE-2015-5531 crg@fogheaven elasticpwn$ python CVE-2015-5531.py exploitlab.int /etc/hosts !dSR script for CVE-2015-5531 127.0.0.1 localhost The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0...

UBUNTU-CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

CVE-2015-5531

CVE-2015-5531 is a directory traversal vulnerability in Elasticsearch affecting versions 1.0.0 through 1.6.0, allowing a remote attacker to read arbitrary files via vectors related to the snapshot API. Multiple connected sources document the issue and reproduce/exploit paths (e.g., elasticsearch ...

Elasticsearch CVE-2015-5531

Summary: Elasticsearch versions from 1.0.0 to 1.6.0 are vulnerable to a directory traversal attack that allows an attacker to retrieve files that are readable by the Elasticsearch JVM process. We have been assigned CVE-2015-5531 for this issue. Fixed versions: Versions 1.6.1 and 1.7.0 address the...

Elasticsearch directory traversal vulnerability CVE-2015-5531

Summary Elasticsearch versions from 1.0.0 to 1.6.0 are vulnerable to a directory traversal attack that allows an attacker to retrieve files that are readable by the Elasticsearch JVM process. We have been assigned CVE-2015-5531 for this issue. Fixed versions Versions 1.6.1 and 1.7.0 address the...

CVE-2014-5531

The CVE-2014-5531 entry concerns the Abode (abode.webview) Android app version 1.7, where the application does not verify X.509 certificates from SSL servers. This misimplementation allows a man-in-the-middle to spoof servers and access sensitive information via a crafted certificate. The provide...

CVE-2013-5531

Cisco Identity Services Engine (ISE) 1.x before 1.1.1 contains an authentication bypass vulnerability that allows remote attackers to bypass authentication and read the support-bundle configuration and credentials data via a crafted session on TCP port 443 (Bug CSCty20405). This is documented in ...

CVE-2012-5531

CVE-2012-5531 : Multiple cross-site scripting (XSS) vulnerabilities in GateIn Portal, part of JBoss Enterprise Portal Platform 5.2.2. The issues allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references indicate a Red Hat security update (RHSA-2013-0141) ad...

Solaris in.telnetd TTYPROMPT Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Solaris...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5531

CVE-2008-5531 describes a family of bypasses where attackers manipulated an HTML document to defeat malware detection in IE6/IE7 by placing an MZ header (the “EXE info”) at the beginning and altering the displayed filename extension, e.g., no extension, .txt, or .jpg. The connected records indica...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2007-5531

Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02...