686 matches found
CVE-2017-9364
Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code...
File upload vulnerability in semcms shqk_Admin/SEMCMS_Upfile.php file
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run. Semcms...
Debian DSA-3824-1 : firebird2.5 - security update
George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions UDF, thus allowing remote authenticated users to execute arbitrary code on the firebird server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Authentication Logic Error Vulnerability in Weetop CMS Backend
Weetop CMS is a web content management system developed by Hangzhou Tintop Technology Co. Weetop CMS V2.0 has an authentication logic error vulnerability in the login function, as a login session is created before a successful login. An attacker can successfully access the backend by performing...
ipa security update
3.0.0-50.el6.2 - Resolves: 1351593 CVE-2016-5404 ipa: Insufficient privileges check in certificate revocation - cert-revoke: fix permission check bypass CVE-2016-5404...
PaKnPost Pro 1.14 - Multiple Vulnerabilities
Exploit Title: PaKnPost Pro Arbitrary File Upload & Remote Code Execution Date: 2016-07-06 Product: PaKnPost Pro Vendor Homepage: http://www.paknpost.org Software Link: https://sourceforge.net/projects/paknpost/ Version: =1.14 Tested on: Windows, Linux Exploit Authors: Edvin Rustemagic, Grega...
Linux kernel buffer overflow vulnerability (CNVD-2016-04392)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel. An attacker can exploit the vulnerability by calling hiddev ioctl with the HIDIOCGUSAGES or HIDIOCSUSAGES commands ...
CVE-2016-1183
NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...
The vulnerability of the iOS operating system allows a perpetrator to replace the security certificate.
The vulnerability of the iOS operating system’s OCSP client stems from the lack of checks for verifying the expiration date of the certificate. Exploiting this vulnerability allows a malicious actor to replace the security certificate remotely...
Windows 10^H^H Symbolic Link Mitigations
Posted by James Forshaw, abusing symbolic links like it’s 1999. For the past couple of years I’ve been researching Windows elevation of privilege attacks. This might be escaping sandboxing or gaining system privileges. One of the techniques I’ve used multiple times is abusing the symbolic link...
Flash Broker-Based - Sandbox Escape via Unexpected Directory Lock
Source: https://code.google.com/p/google-security-research/issues/detail?id=279&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id FlashBroker - Junction Check Bypass With Locked Directory IE PM Sandbox Escape 1. Windows 8.1 Internet Explorer Protected Mode Bypass in FlashBrok...
Flash Broker-Based - Sandbox Escape via Forward Slash Instead of Backslash
Flash Broker-Based - Sandbox Escape via Forward Slash Instead of Backslash Source: https://code.google.com/p/google-security-research/issues/detail?id=278&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id FlashBroker - Junction Check Bypass With Forward Slash IE PM Sandbox...
Unspecified Vulnerability in WordPress Plugin WPML
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WPML is one of the multi-language plug-ins. A security vulnerability exists in the WordPress WPML plugin prior to...
CVE-2014-9422
CVE-2014-9422 affects MIT Kerberos (krb5) kadmind, where the two‑component server principal check can be bypassed by remote authenticated users using a principal starting with or containing a kadmind-related string (e.g., “ka/x”). The issue stems from the check_rpcsec_auth path in kadmind, enabli...
CVE-2014-5300
The CVE-2014-5300 flaw affects Adaptive Computing Moab prior to 7.2.9 and Moab 8 prior to 8.0.0, where authentication can be bypassed by a message without a valid , allowing impersonation of arbitrary users and remote command execution. Root cause: the Moab server does not properly authenticate r...
Important: java-1.6.0-openjdk
Issue Overview: It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-4216, CVE-2014-4219 A format string flaw was discover...
Mozilla Firefox for Android < 27.0 Multiple Vulnerabilities
Binary data 8101.prm...
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
A code execution vulnerability has been reported in Oracle Java. The vulnerability is due to an access control failure in the com.sun.jmx.mbeanserver package and in the invokeWithArguments method of the java.lang.invoke.MethodHandle class. A remote attacker could trigger this vulnerability by usi...
Security Advisory-A Vulnerability on the HWTACACS Authorization Module of the CloudEngine
The HWTACACS modules of some Huawei CloudEngine series switches have vulnerabilities. Attackers can execute the commands that can be used by users with higher-level permissions by bypass the right check of HWTACACS server. HWPSIRT-2013-1256. This Vulnerability has been assigned Common...
