CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with a build fingerprint of...

CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with a build fingerprint of...

CVE-2018-3969

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

Notepad++: No SearchEngine sanatizing can lead to command injection

Information: Summary: Notepad++ is vulnerable to a command injection vulnerability. Debug Info: Notepad++ v7.6.3 32-bit Build time : Jan 27 2019 - 17:20:30 Path : C:\Program Files x86\Notepad++\notepad++.exe Admin mode : ON Local Conf mode : OFF OS : Windows 10 64-bit Plugins : none Description:...

CVE-2019-3463

Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...

CVE-2018-15007

The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069trxl601sky/x6069trxl601sky:6.0/MRA58K/1482897127:user/release-keys contains a pre-installed platform app with a package name of com.fw.upgrade.sysoper versionCode=238, versionName=2.3.8 that contains an exported broadcast...

[SECURITY] [DSA 4243-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4243-1 [email protected] https://www.debian.org/security/ Luciano Bello July 11, 2018 https://www.debian.org/security/faq -...

Online Store System CMS SQL Injection Vulnerability

Online Store System CMS is an online management system. A SQL injection vulnerability exists in Online Store System CMS, which can be exploited by an attacker to execute arbitrary SQL commands...

Important: patch

Issue Overview: Malicious patch files cause ed to execute arbitrary commands GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a...

Webmin 1.850 - Multiple Vulnerabilities

Webmin 1.850 - Multiple Vulnerabilities + SSD Beyond Security: https://blogs.securiteam.com/index.php/archives/3430 + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBMIN-v1.850-REMOTE-COMMAND-EXECUTION.txt + ISR:...

CVE-2017-9497

The CVE-2017-9497 entry concerns Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). Affected component is the device firmware exposed via the diagnostics Web Inspector route; when a user with physical proximity pulls up the diagnostics menu, an attacker can post to...

CVE-2017-6590

An issue was discovered in network-manager-applet aka network-manager-gnome in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation...

Joomla Component com_alameda SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Alameda. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Measuresoft ScadaPro <= 4.0.0 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack overflow...

Oracle 8 oratclsh Suid Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/159/info Oracle8 is an enterprise level database. As part of the Internet Agent option installation process it installs the file $ORACLEHOME/bin/oratclsh as suid root. oratclsh is a TCL application that provides full acce...

Cogent DataHub Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cogent DataHub Command Injection', 'Description' = %q This module exploits an injection vulnerability in Cogent DataHub prior to 7.3....

Monitorix HTTP Server < 3.3.1 RCE Vulnerability - Active Check

Monitorix HTTP Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

RaidSonic IB-NAS5220 and IB-NAS4220-B Multiple Security Vulnerabilities (Sep 2013) - Active Check

RaidSonic IB-NAS5220 and IB-NAS422-B devices are prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack overflow vulnerabilities various Denial of Service...