8204 matches found
openSUSE: Security Advisory for vim (openSUSE-SU-2016:2993-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Geutebruck testaction.cgi Remote Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Geutebruck testaction.cgi Remote Command Execution', 'Description' = %q This module exploits a an arbitrary command execution...
CVE-2016-8363
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...
CVE-2016-8363
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...
TalariaX SendQuick Entera and Avera Device Command Injection Vulnerability
TalariaX SendQuick Entera and Avera are both products of TalariaX Singapore. The former is a web-based server management system and the latter is a plug-and-play network monitoring system. A command injection vulnerability exists in versions of the TalariaX SendQuick Entera and Avera appliances...
Huawei EMUI Elevation of Privilege Vulnerability
Huawei EMUI is a set of intelligent terminal human-computer interaction system based on the Android platform developed by China's Huawei Huawei. An elevation of privilege vulnerability exists in Huawei EMUI, which stems from a failure to adequately check specific parameters in the keyguard...
CVE-2015-6024
CVE-2015-6024 affects NetCommWireless HSPA 3G10WVE routers (firmware before 3G10WVE-L101-S306ETS-C01_R05). The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter, indicating potential remote command execution with ...
Trend Micro Virtual Mobile Infrastructure Arbitrary Command Execution Vulnerability
Trend Micro Virtual Mobile Infrastructure is a solution that enables IT managers to host enterprise applications and data in a secure mobile operating system on a central server. A security vulnerability in the handlecertificate function in Trend Micro Virtual Mobile Infrastructure...
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's sshclient. Mitigation Disable salt-api for mitigation...
CVE-2016-10043
An issue was discovered in Radisys MRF Web Panel SWMS 9.0.1. The MSMMACRONAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character | to inject arbitrary OS commands and retrieve the output in the application's...
Pear HTTP_Upload v1.0.0b3 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications + + Credits: John Page AKA Hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PEAR-HTTPUPLOAD-ARBITRARY-FILE-UPLOAD.txt + ISR: ApparitionSEC + Vendor: ============ pear.php.net Product:...
RedHat Update for mysql RHSA-2017:0184-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mis-configuration of Apache Velocity template engine used to send emails in GigaCC OFFICE
Overview GigaCC OFFICE provided by WAM!NET Japan K.K. contains mis-configuration of Apache Velocity template engine which is used to send emails. WAM!NET Japan K.K. and the following people reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and...
CVE-2016-7545
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...
CVE-2016-9016
Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...
Ansible Arbitrary Command Execution Vulnerability
Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. Ansible fails to filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting special requests to execute arbitrary commands...
[ASA-201701-18] ark: arbitrary command execution
Arch Linux Security Advisory ASA-201701-18 ========================================== Severity: High Date : 2017-01-13 CVE-ID : CVE-2017-5330 Package : ark Type : arbitrary command execution Remote : No Link : https://security.archlinux.org/AVG-130 Summary ======= The package ark before version...
FreePBX Framework hotelwakeup Module Directory Traversal
A directory traversal vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the "hotelwakeup" module. A remote unauthenticated attacker can exploit this vulnerability by sending maliciously crafted requests to the page that could lead to arbitrary command...
CVE-2015-0854
Summary (CVE-2015-0854): The Shutter screenshot tool is affected up to version 0.93.1. The vulnerability resides in App/HelperFunctions.pm where the image name is mishandled during the “Show in Folder” action, allowing a user-assisted remote attacker to execute arbitrary commands. This is trigger...