Juniper Junos Space < 19.2R1 Multiple Vulnerabilities (JSA10951)

According to its self-reported version number, the remote Junos Space version is prior to 19.2R1. It is, therefore, affected by multiple vulnerabilities: - A memory double free vulnerability exists in The libcurl API function called curlmaprintf before version 7.51.0 due to an unsafe sizet...

The vulnerability of the software for interacting with servers using curl, related to writing data beyond the buffer limit, allows a hacker to trigger a service failure.

The vulnerability of the software for interacting with curl servers relates to data writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

MGASA-2019-0337 Updated curl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. CVE-2019-5435 A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4...

Updated curl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. CVE-2019-5435 A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4...

Oracle Enterprise Manager Ops Center (Jan 2019 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - An unspecified vulnerability in the subcomponent Networking jQuery of Enterprise Manager Ops Center. Supported versions that...

OpenNetAdmin 18.1.1 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: OpenNetAdmin v18.1.1 RCE Exploit Author: mattpascoe Vendor Homepage: http://opennetadmin.com/ Software Link: https://github.com/opennetadmin/ona Version: v18.1.1 Tested on: Linux !/bin/bash URL="$1" while true;do echo -n "$ ";...

OpenNetAdmin 18.1.1 Remote Code Execution

Exploit Title: OpenNetAdmin 18.1.1 - Remote Code Execution Date: 2019-11-19 Exploit Author: mattpascoe Vendor Homepage: http://opennetadmin.com/ Software Link: https://github.com/opennetadmin/ona Version: v18.1.1 Tested on: Linux Exploit Title: OpenNetAdmin v18.1.1 RCE Date: 2019-11-19 Exploit...

Centova Cast 3.2.12 - Denial of Service (PoC)

Centova Cast 3.2.12 - Denial of Service PoC Exploit Title: Centova Cast 3.2.12 - Denial of Service PoC Date: 2019-11-18 Exploit Author: DroidU Vendor Homepage: https://centova.com Affected Version: =v3.2.12 Tested on: Debian 9, CentOS 7 =============================================== The Centova...

Centova Cast 3.2.11 - Arbitrary File Download

Centova Cast 3.2.11 - Arbitrary File Download Exploit Title: Centova Cast 3.2.11 - Arbitrary File Download Date: 2019-11-17 Exploit Author: DroidU Vendor Homepage: https://centova.com Affected Version: =v3.2.11 Tested on: Debian 9, CentOS 7 !/bin/bash if "$4" = "" then echo "Usage: $0...

curl security and bug fix update

7.61.1-11 - rebuild with updated annobin to prevent Execshield RPMDiff check from failing 7.61.1-10 - fix SMTP end-of-response out-of-bounds read CVE-2019-3823 - fix NTLMv2 type-3 header stack buffer overflow CVE-2019-3822 - fix NTLM type-2 out-of-bounds buffer read CVE-2018-16890 - xattr: strip...

CVE-2019-5443

A non-privileged user or program can put code and a config file in a known non-privileged path under C:/usr/local/ that will make curl = 7.65.1 automatically run the code as an openssl "engine" on invocation. If that curl is invoked by a privileged user it can do anything it wants...

Critical Photon OS Security Update - PHSA-2019-0255

Updates of 'file', 'git', 'python3', 'libndp', 'curl', 'haproxy', 'libpcap', 'linux', 'tcpdump', 'binutils', 'e2fsprogs', 'linux-esx', 'python2', 'polkit' packages of Photon OS have been released...

Linear eMerge E3 1.00-06 Privilege Escalation

Linear eMerge E3 Privilege Escalation Affected version: =1.00-06 CVE: CVE-2019-7258, CVE-2019-7259 Advisory: https://applied-risk.com/resources/ar-2019-005 by Gjoko 'LiquidWorm' Krstic Escalate: curl "http://192.168.1.2/?c=webuser&m=update" -X POST –-data...

eMerge E3 1.00-06 - Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Exploit Title: eMerge E3 1.00-06 - Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 1.00-06 Tested o...

Linear eMerge E3 1.00-06 Directory Traversal

Linear eMerge E3 Unauthenticated Directory Traversal File Disclosure Affected version: =1.00-06 CVE: CVE-2019-7254 Advisory: https://applied-risk.com/resources/ar-2019-005 by Gjoko 'LiquidWorm' Krstic GET /?c=../../../../../../etc/passwd%00 Host: 192.168.1.2...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2019-2101)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481 - Heap buffer overflow in the TFTP protocol handler in...

EulerOS 2.0 SP5 : curl (EulerOS-SA-2019-2136)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482 - curl before version 7.51.0 uses outdated IDNA 2003...

EulerOS 2.0 SP3 : curl (EulerOS-SA-2019-2252)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482 Note that Tenable Network Security has extracted the precedi...

RHEL 8 : curl (RHSA-2019:3701)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3701 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

curl: NTLM type-2 heap out-of-bounds buffer read

An out-of-bounds read flaw was found in the way curl handled NTLMv2 type-2 headers. When connecting to a remote malicious server which uses NTLM authentication, the flaw could cause curl to crash...