Command injection

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005...

CVE-2016-1403

CVE-2016-1403 affects Cisco IP 8800 Series Phones running firmware 11.0.1 and earlier. A vulnerability in the btcli CLI utility allows an authenticated, local attacker to inject commands and gain OS-level privileges due to insufficient input validation. Impact is local privilege escalation with p...

Cisco IP 8800 Series Phones btcli Utility Command Injection Vulnerability

A vulnerability in a command-line interface CLI utility of the Cisco IP 8800 Series Phones could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

CVE-2014-8800

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

CVE-2014-8800

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

CVE-2014-8800

CVE-2014-8800 is a cross-site scripting (XSS) vulnerability in the Nextend Facebook Connect WordPress plugin prior to 1.5.1. The issue affects nextend-facebook-settings.php via the fb_login_button parameter in a newfb_update_options action, enabling remote injection of arbitrary HTML/script. Publ...

WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting

WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting Exploit Title: Nextend Facebook Connect 1.4.59 XSS Date: 16-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...

WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting

Exploit Title: Nextend Facebook Connect 1.4.59 XSS Date: 16-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/nextend-facebook-connect.1.4.59.zip Category: webapps CVE: CVE-2014-8800 1...

深澜软件鸡肋漏洞可被getshell

简要描述： 深澜软件鸡肋漏洞造成getshell 详细说明： 有好几个鸡肋漏洞，就造成了getshell。 本例以中枪的陕西科技大学为例。 1.爆路径问题http://xxxx.xx:8080/global.php，所有均存在路径泄露 不过实际路径是/srun3/srun/services/ （1）80端口路径/srun3/web/ （2）8800端口路径/srun3/srun/services/ （3）8080/8081端口路径/srun3/srun/web/ 2.管理后台（8080/8081端口），默认口令 support...

HP Intelligent Management code execution

img.exe code execution on TCP/8800 request parsing...

(0Day) HP Intelligent Management Center img.exe Integer Wrap Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the img.exe component, which listens by default on TCP...

HP Intelligent Management Center img Buffer Overflow (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

(0Day) HP 3COM/H3C Intelligent Management Center img recv Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When...

ZDI-11-160: HP 3COM/H3C Intelligent Management Center img Remote Code Execution Vulnerability

ZDI-11-160: HP 3COM/H3C Intelligent Management Center img Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-160 May 10, 2011 -- CVE ID: CVE-2011-1848 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

HP 3COM/H3C Intelligent Management Center img Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When...

linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes ======================================================================= / Description: a linux/x86...

linux/x86 - shellcode that forks a HTTP Server on port tcp/8800 166 bytes

linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes. Shellcode exploit for linx86 platform / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. OpenVAS Vulnerability Test $Id: fcore20098800.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8800 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Design/Logic Flaw

The Research In Motion RIM BlackBerry 8800 allows remote attackers to cause a denial of service memory consumption and browser crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...