49 matches found
CVE-2013-5863
CVE-2013-5863 is an Oracle Solaris 11.1 vulnerability in the IPS repository daemon. The NT network-facing issue could allow remote attackers to tamper with integrity via HTTP-based vectors, as described in in-scope Nessus/Cpu notes. The impact is stated as potential unauthorized modification of S...
CVE-2012-5863
The CVE-2012-5863 vulnerability affects Sinapsi eSolar systems (Light, DUO, and related Sinapsi devices) with firmware prior to 2.0.2870_xx_2.2.12. It is an OS Command Injection flaw in the ping.php endpoint, where shell metacharacters in the ip dominio parameter can be used by an unauthenticated...
CVE-2007-5863
creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16867 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/softwareupdate.rb 2025-02-06 03:13:38+00:00| seen|...
Mac OS X Security Update 2007-009
The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...
CVE-2008-5863
CVE-2008-5863 describes an SQL injection in the Woltlab Burning Board (wBB) Userlocator module, version 3.0, via the y parameter in the get_user action within locator.php. The affected component is the Userlocator module for wBB; the vulnerability arises from unsafely handling user input, enablin...
CVE-2008-5863
creationtimestamp| type| source ---|---|--- 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7530...
CVE-2007-5863
CVE-2007-5863 concerns Apple OS X Software Update (10.5.1) where a MITM between client and server, using a modified distribution definition file with the “allow-external-scripts” option, allows remote command execution. Public sources in the connected set corroborate an Apple OS X Software Update...
Apple OS X Software Update Command Execution
This module exploits a feature in the Distribution Packages, which are used in the Apple Software Update mechanism. This feature allows for arbitrary command execution through JavaScript. This exploit provides the malicious update server. Requests must be redirected to this server by other means...
CVE-2006-5863
CVE-2006-5863 describes a PHP remote file inclusion in LetterIt 2, where a crafted URL in the lang parameter passed to inc/session.php allows an attacker to execute arbitrary PHP code on the server. The vulnerability is categorized as a remote code execution via user-controlled input. The availab...