Vtiger CRM Authenticated Remote Code Execution (CVE-2015-6000)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vtiger CRM Authenticated Remote Code Execution CVE-2015-6000 http://b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.html 1. Summary 2. Vulnerability Details 3. Exploitation / Proof of Concept 4. Timeline 5. See Also 1. Summary Vtiger CRM...

Vtiger CRM 6.3 Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vtiger CRM Authenticated Remote Code Execution CVE-2015-6000 1. Summary 2. Vulnerability Details 3. Exploitation / Proof of Concept 4. Timeline 5. See Also 1. Summary Vtiger CRM is a CRM application. Vtiger CRM version 6.3 “Open Source” branch; releas...

vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution

vTiger CRM 6.3.0 - Authenticated Remote Code Execution -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit Title: Vtiger CRM = 6.3.0 Authenticated Remote Code Execution Date: 2015-09-28 Exploit Author: Benjamin Daniel Mussler Vendor Homepage: https://www.vtiger.com Software Link:...

vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit Title: Vtiger CRM --------------------...

Vtiger CRM - Authenticated Logo Upload RCE

Vtiger 6.3.0 CRM's administration interface allows for the upload of a company logo. Instead of uploading an image, an attacker may choose to upload a file containing PHP code and run this code by accessing the resulting PHP file. This module was tested against vTiger CRM v6.3.0. Module Options m...

Vtiger CRM 6.3.0 Authenticated Remote Code Execution

Exploit for php platform in category web applications Exploit Title: Vtiger CRM = 6.3.0 Authenticated Remote Code Execution Date: 2015-09-28 Exploit Author: Benjamin Daniel Mussler Vendor Homepage: https://www.vtiger.com Software Link: https://www.vtiger.com/open-source-downloads/ Version: 6.3.0...

WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities

Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Design/Logic Flaw

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0776

CVE-2015-0776 is a Cisco IOS XR telnetd denial of service affecting Network Convergence System 6000 devices running IOS XR 5.0.1. The root cause is improper processing of malformed TELNET packets by the telnetd process, which can allow an unauthenticated remote attacker to trigger a device reload...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Cisco IOS XR NCS 6000 Multiple ntpd Vulnerabilities

The remote Cisco device is running a version of IOS XR software that is affected by the following vulnerabilities : - Errors exist related to weak cryptographic pseudorandom number generation PRNG, the functions 'ntprandom' and and 'configauth', and the 'ntp-keygen' utility. A man-in-the-middle...

Cisco IPv6 Denial of Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier...

Code injection

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

CVE-2015-0618

Cisco IOS XR DoS (CVE-2015-0618) affects IOS XR 5.0.1/5.2.1 on NCS 6000 and 5.1.3/5.1.4 on CRS-X. The issue arises from improper processing of malformed IPv6 packets with extension headers, allowing remote attackers to trigger a line-card reload and thus a denial of service. Evidence in multiple ...

Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability

A vulnerability in the parsing of malformed IP version 6 IPv6 packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier Routing System CRS-X could allow an unauthenticated, remote attacker to cause a reload of a line card that is processing traffic. The...

Race condition

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

CVE-2014-8005

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

CVE-2014-8005

The CVE-2014-8005 entry concerns a race condition in the lighttpd module of Cisco IOS XR (5.1 and earlier) running on Network Convergence System 6000 devices. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service by establishing many TCP sessions to the lighttp...

CVE-2014-6000

CVE-2014-6000 affects the FreshDirect Android app (com.freshdirect.android) 2.7.1. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing certificate va...