35 matches found
CVE-2019-8261
CVE-2019-8261: UltraVNC revision 1199 contains an out-of-bounds read in the VNC client CoRRE decoder caused by a multiplication overflow. Exploitation is reported as feasible via network connectivity. The vulnerability has been addressed in revision 1200. Affected component: UltraVNC client VNC d...
CVE-2017-8261
CVE-2017-8261 is a Qualcomm component issue affecting the Camera driver in CAF Android builds using the Linux kernel. The root cause is a potential kernel overwrite in a camera driver ioctl, enabling Elevation of Privilege rather than remote code execution. The vulnerability is classified as EoP ...
CVE-2016-8261
CVE-2016-8261 entry is rejected/not used and does not represent an active vulnerability.
Ipswitch WhatsUp Gold < 16.4 Multiple Vulnerabilities
The remote host has a version of Ipswitch WhatsUp Gold installed that is prior to 16.4.0. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist due to improper sanitization of user-supplied input to the 'sUniqueID' parameter and the 'find...
WhatsUp Gold 16.3 Remote Code Execution
Exploit Title: WhatsUp Gold v16.3 Unauthenticated Remote Code Execution Date: 2016-01-13 Exploit Author: Matt Buzanowski Vendor Homepage: http://www.ipswitch.com/ Version: 16.3.x Tested on: Windows 7 x86 CVE : CVE-2015-8261 Usage: python DroneDeleteOldMeasurements.py import requests import sys...
WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution
Exploit for asp platform in category web applications Exploit Title: WhatsUp Gold v16.3 Unauthenticated Remote Code Execution Date: 2016-01-13 Exploit Author: Matt Buzanowski Vendor Homepage: http://www.ipswitch.com/ Version: 16.3.x Tested on: Windows 7 x86 CVE : CVE-2015-8261 Usage: python...
WhatsUp Gold 16.3 - Remote Code Execution
WhatsUp Gold 16.3 - Remote Code Execution Exploit Title: WhatsUp Gold v16.3 Unauthenticated Remote Code Execution Date: 2016-01-13 Exploit Author: Matt Buzanowski Vendor Homepage: http://www.ipswitch.com/ Version: 16.3.x Tested on: Windows 7 x86 CVE : CVE-2015-8261 Usage: python...
WhatsUp Gold 16.3 - Remote Code Execution
Exploit Title: WhatsUp Gold v16.3 Unauthenticated Remote Code Execution Date: 2016-01-13 Exploit Author: Matt Buzanowski Vendor Homepage: http://www.ipswitch.com/ Version: 16.3.x Tested on: Windows 7 x86 CVE : CVE-2015-8261 Usage: python DroneDeleteOldMeasurements.py import requests import sys...
Ipswitch WhatsUp Gold SQL injection Vulnerability(CVE-2 0 1 5-8 2 6 1)-vulnerability warning-the black bar safety net
Affected system: Ipswitch WhatsUp Gold 〈 16.4 Description: CVECAN ID: CVE-2 0 1 5-8 2 6 1 WhatsUp Gold offers a complete easy-to-use monitoring mechanism for comprehensive monitoring of application services and network equipment, and assist IT managers the network management information into a...
CVE-2015-8261
The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request...
CVE-2015-8261
The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request...
CVE-2015-8261
Ipswitch WhatsUp Gold before 16.4 is vulnerable to SQL injection via the DroneDeleteOldMeasurements SOAP handler, caused by improper validation of serialized XML objects. A remote attacker can craft a SOAP request to inject/manipulate SQL in the back-end database, potentially exposing or altering...
IPSwitch WhatsUp Gold does not validate commands when deserializing XML objects
Overview IPSwitch WhatsUp Gold version 16.3 does not properly validate data when deserializing XML objects sent over SOAP requests. Description CWE-502: Deserialization of Untrusted Data - CVE-2015-8261 WhatsUp Gold version 16.3 contains a SOAP request handler named DroneDeleteOldMeasurements...