Code injection

Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file...

CVE-2018-20300

Empire CMS 7.5 is affected by CVE-2018-20300. A remote attacker can execute arbitrary PHP code by supplying a crafted ftemp parameter in the enews=EditMemberForm action, because the code is injected into a memberform.$fid.php file. Affected component: the enews EditMemberForm flow in Empire CMS 7...

PRTG Network Monitor <= 18.2.39.1661 Multiple Vulnerabilities

PRTG Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

RHEL 7 : xerces-c (RHSA-2018:3506)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3506 advisory. Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and writ...

CVE-2018-2912

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate subcomponent: Manager. Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle GoldenGate...

CVE-2018-17891

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

Code injection

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

CVE-2018-17891

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

Carestream Vue RIS

1. EXECUTIVE SUMMARY CVSS v3 3.7 ATTENTION: Exploitable remotely Vendor: Carestream Equipment: Carestream Vue RIS Vulnerability: Information Exposure Through an Error Message 2. RISK EVALUATION An attacker with access to the network of the affected system can passively read traffic. 3. TECHNICAL...

CrossFont 7.5 - Denial of Service (PoC)

CrossFont 7.5 - Denial of Service PoC Exploit Title: CrossFont 7.5 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-26 Software Link: http://www.acutesystems.com/cfnt/cfsetup.exe Tested Version: 7.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python...

CrossFont 7.5 Denial Of Service

Exploit Title: CrossFont 7.5 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-26 Software Link: http://www.acutesystems.com/cfnt/cfsetup.exe Tested Version: 7.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it will create a new file...

CrossFont 7.5 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: CrossFont 7.5 - Denial of Service PoC Author: Gionathan "John" Reale Software Link: http://www.acutesystems.com/cfnt/cfsetup.exe Tested Version: 7.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, ...

CrossFont 7.5 - Denial of Service (PoC)

Exploit Title: CrossFont 7.5 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-26 Software Link: http://www.acutesystems.com/cfnt/cfsetup.exe Tested Version: 7.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it will create a new file...

Product update: Virtuozzo 6.0 Update 12 Hotfix 31 (6.0.12-3717)

This update provides a stability fix. Vulnerability id: PSBM-87547 Centos 7.5 VM running on a host with an AMD CPU could crash after the host had been updated...

XenServer Multiple Security Updates

Description of Problem Several security issues have been identified that impact XenServer. Customers should consider these issues and determine possible impact to their own systems. These updates provide a mitigation for recently disclosed issues affecting Intel CPUs. These issues, if exploited,...

CVE-2018-1503

CVE-2018-1503 affects IBM WebSphere MQ (IBM MQ) versions: 7.5.0.0–7.5.0.8, 8.0.0.0–8.0.0.9, and 9.0.0.0–9.0.0.3. A remotely authenticated attacker could send invalid or malformed headers that block message transmission on the affected channels, effectively a denial of service. The IBM bulletin pr...

CVE-2017-1795

IBM WebSphere MQ Managed File Transfer (MFT) is affected by CVE-2017-1795. The vulnerability allows a local user to obtain highly sensitive information through trace log files generated by MFT commands. Affected product lines are IBM WebSphere MQ Managed File Transfer v7.5.0.0–v7.5.0.8, v8.0.0.0–...

NuCom NC-WR644GACV Unauthenticated Configuration File Download Vulnerability

NuCom NC-WR644GACV with software versions STA 005 and below suffer from a configuration file download vulnerability that allows for extraction of the administrative credentials. Overview ======== Researchers of NVEL4 Cybersecurity company have discovered that it is possible to access to the confi...

pki-core security, bug fix, and enhancement update

10.5.1-13.1 - Rebuild due to build system database problem 10.5.1-13 - - RHEL 7.5: - - Bugzilla Bug 1553068 - Using a Netmask produces an odd entry in a certifcate rhel-7.5.z ftweedal - Bugzilla Bug 1585945 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC...

Security Bulletin: RCE vulnerability in JMS Client in IBM MessageSight (CVE-2016-0375)

Summary RCE vulnerability in JMS Client in IBM MessageSight Vulnerability Details CVEID: CVE-2016-0375 DESCRIPTION: IBM MessageSight contains an unspecified vulnerability that could allow a remote authenticated attacker to execute arbitrary commands with administrator privileges. CVSS Base Score:...