Oracle Linux 7 : firefox (ELSA-2020-2827)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2827 advisory. 68.10.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

ClearPass Policy Manager Unauthenticated Remote Command Execution Exploit

!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact email protected. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port local host...

RHEL 7 : microcode_ctl (RHSA-2020:2771)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2771 advisory. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: L1D Cache Eviction Sampling CVE-2020-0549 hw: Vector...

szuper-meghivok.hu Cross Site Scripting vulnerability OBB-1218260

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

dlmusicas.co Cross Site Scripting vulnerability OBB-1218210

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

eduteka.icesi.edu.co Cross Site Scripting vulnerability OBB-1218185

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

RHEL 7 : gettext (RHSA-2020:2846)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2846 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

RHEL 7 : php (RHSA-2020:2835)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2835 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: underflow in envpathinfo in fpmmain.c...

RHEL 7 : ruby (RHSA-2020:2839)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2839 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...

RHEL 7 : kernel (RHSA-2020:2832)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2832 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

RHEL 7 : tomcat (RHSA-2020:2840)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2840 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat AJP File...

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2020-1774)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FTPShell Server 6.90 - Buffer Overflow

FTPShell Server version 6.90 buffer overflow proof of concept exploit. Exploit Title: FTPShell Server 6.90 ftpshelldmgr.exe- Buffer Overflow SEHPoC Exploit Author: Saeed reza Zamanian Date: 2020-07-01 Vendor: Code Origin Vendor Homepage: https://www.ftpshell.com/ Software Link:...

RHEL 6 / 7 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 (Important) (RHSA-2020:2816)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2816 advisory. Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Security Fixes: keycloak: Lack of checks in...

RHEL 6 / 7 / 8 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7 (Important) (RHSA-2020:2814)

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2814 advisory. Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3 Security Fixes: keycloak: Lack of check...

RHEL 7 : slirp4netns (RHSA-2020:0889)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0889 advisory. The slirp4netns package contains user-mode networking for unprivileged network namespaces. It is required to enable networking for rootless...

EulerOS Virtualization 3.0.6.0 : openssl098e (EulerOS-SA-2020-1774)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found in the way OpenSSL handled certain PKCS7 inputs. An attacker able to make an application...

FTPShell Server 6.90 Buffer Overflow Exploit

Exploit Title: FTPShell Server 6.90 ftpshelldmgr.exe- Buffer Overflow SEHPoC Exploit Author: Saeed reza Zamanian Vendor: Code Origin Vendor Homepage: https://www.ftpshell.com/ Software Link: https://www.ftpshell.com/downloadserver.htm Version: 6.90 Release Date : Jan 31, 2020 Tested On: Windows 7...

RM Downloader 2.50.60 2006.06.23 - (Load) Local Buffer Overflow (EggHunter) (SEH) Exploit

Exploit Title: RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow EggHunter SEH PoC Exploit Author: Paras Bhatia Vulnerable Software: RM Downloader Software Link Download: https://github.com/x00x00x00x00/RMDownloader2.50.60/raw/master/RMDownloader.exe Version: 2.50.60 2006.06.23...

FTPShell Server 6.90 Buffer Overflow

Exploit Title: FTPShell Server 6.90 ftpshelldmgr.exe- Buffer Overflow SEHPoC Exploit Author: Saeed reza Zamanian Date: 2020-07-01 Vendor: Code Origin Vendor Homepage: https://www.ftpshell.com/ Software Link: https://www.ftpshell.com/downloadserver.htm Version: 6.90 Release Date : Jan 31, 2020...