3965 matches found
Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - Authenticated Remote Root Exploit (Me
Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link:...
Barracuda Web Application Firewall 8.0.1.008 - (Authenticated) Remote Command Execution (Metasploit)
Barracuda Web Application Firewall 8.0.1.008 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Web Application Firewall 'Barracuda Web Application Firewall %q This module exploits a remote command execution vulnerability in the Barracuda Web Application Firweall firmwar...
Dell OpenManage Server Administrator 8.2 ViewFile Directory Traversal
The version of Dell OpenManage Server Administrator OMSA running on the remote web server is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input to the 'file' parameter in the /ViewFile script. An authenticated, remote attacker who can access an...
Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit) (3)
Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - Authenticated Remote Command Execution Metasploit 3 Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort [email protected] Vendor Homepage:...
Multiple Apple Products libxml2 Memory Corruption Denial of Service Vulnerability (CNVD-2016-05741)
Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. libxslt is an XSLTC library developed for the GNOME project. A security vulnerability in...
Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)
Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalanc...
Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Metasploit)
Exploit Title: Barracuda Spam & Virus Firewall Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/landing/pages/spamfirewall/ Version: Spam and Virus Firewall 'Barracuda Spam...
SAP Predictive Analytics Remote Command Execution Vulnerability
SAP Predictive Analytics is a suite of predictive analytics software. A security vulnerability in SAP Predictive Analytics allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary commands...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially created request...
The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary code or gain access to protected information.
The vulnerability of the software interface of the Cisco Prime Infrastructure network lifecycle management software is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain access to sensitive information through a specially crafted HTTP...
The vulnerability of the Apache Struts software platform, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the Apache Struts software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a combined request...
Keitai Kit for Movable Type Operating System Command Injection Vulnerability
Six Apart Movable Type MT is a blogging system. keitai Kit is a security check plugin used in it. Keitai Kit for Movable Type is vulnerable, which can be exploited by remote attackers to execute arbitrary OS commands upon submission of a special request...
Juniper Junos Denial of Service Vulnerability (CNVD-2016-05040)
Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in Juniper Junos that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
OpenLDAP openldap-servers Local Information Disclosure Vulnerability
OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP. openldap-servers is one of the server-sides. A security vulnerability in OpenLDAP openldap-servers allows remote attackers to submit a special request to obtain sensitive information...
Juniper Junos Local Authentication Bypass Vulnerability
Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in Juniper Junos that could be exploited by a local attacker to submit a special request to bypass the authentication mechanism and perform an unauthorized operation...
Code injection
The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...
The vulnerability of VMware Fusion’s hypervisor allows a attacker to trigger a failure in the hosting or host operating system.
The vulnerability of VMware Fusion exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...
The vulnerability of the Apache HTTP Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in the deflateinfilter function of the moddeflate.c module in the Apache HTTP Server allows malicious actors to trigger a denial-of-service attack by sending a specially crafted request that is decompressed into a large amount of data...
Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)
The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...
