CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

Cross site request forgery (csrf)

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

Code injection

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

Cisco UCS Central Arbitrary Command Execution Vulnerability

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

OrientDB Groovy Wrapper Remote Code Execution (CVE-2017-11467)

A remote code execution vulnerability exists in OrientDB server. The vulnerability is due privilege escalation when the server receives a specially crafted request. A remote attacker can exploit this vulnerability to gain privilege rights and execute arbitrary code...

RAVPower FileHub Information Disclosure Vulnerability

The RAVPower FileHub is a multifunctional digital device from RAVPower USA. The device also functions as a card reader, USB storage, and NAS file server. A security vulnerability exists in RAVPower FileHub version 2.000.056. A remote attacker can exploit this vulnerability by sending a specially...

Multiple IoT Command Injection

Remote command injection vulnerabilities exist in multiple IoT devices. A remote attacker can exploit these weaknesses to execute arbitrary commands in the affected devices via a crafted request...

DocCMS 2016 suffers from an arbitrary file download vulnerability

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly from the deep throat enterprise building system ShlCms, is a free and open source enterprise website building system, enterprise website generation system. DocCMS 2016 suffers from an arbitrary file downloa...

The vulnerability of the try_read_command function (memcached.c) in the memcached data caching software allows a attacker to cause a service failure.

The vulnerability of the tryreadcommand function in the memcached.c library lies in the fact that the operation is executed outside of the buffer in memory. Exploiting this vulnerability allows an attacker, operating locally, to cause a service failure segmentation fault by using a specially...

OrientDB Server Remote Code Execution

A remote code execution vulnerability exists in OrientDB server. The vulnerability is due privilege escalation when the server receives a specially crafted request. A remote attacker can exploit this vulnerability to gain privilege rights and execute arbitrary code...

CommuniGatePro 6.2 Missing XIMSS Tag Validation

Exploit Title: CommuniGatePro 6.2 - Missing XIMSS tags validation Date: 02/01/2018 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.2.x tags by tags and vice versa, ending up...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2018-02202)

IBM Websphere MQ is available through the Java Message Service JMS specification of the messaging and queuing middleware provider. A denial of service vulnerability exists in IBM WebSphere MQ. An attacker could exploit the vulnerability by sending a specially crafted request that causes the chann...

CVE-2017-1557

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547...

CVE-2017-1557

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547...

CVE-2017-17098

The writeLog function in fncommon.php in gps-server.net GPS Tracking Software self hosted through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log viewing, as demonstrated by in a login request...

GoAhead LD_PRELOAD Remote Code Execution (CVE-2017-17562)

A remote code execution vulnerability exists in GoAhead web server. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Linux kernel information disclosure vulnerability (CNVD-2017-37613)

Linux kernel is a popular operating system. Linux kernel suffers from an information disclosure vulnerability that allows local attackers to exploit the vulnerability by submitting a special request to obtain sensitive information...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2017-36400)

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the Local Packet Transport Services LPTS ingress frame handling feature in...

The vulnerability of the implementation of the direct authentication service for microprogramming software in Cisco Adaptive Security Appliance (ASA) allows a attacker to cause a service failure.

The vulnerability of the direct authentication service for microprogramming software in Cisco Adaptive Security Appliance ASA devices is related to insufficient checking of HTTP request headers. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot and a service...