CVE-2018-11052

Dell EMC Elastic Cloud Storage (ECS) versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability that allows a remote, unauthenticated attacker to read and modify S3 objects by sending specially crafted S3 requests. This CVE is documented with a high/severe impact (CVSS v3 base sc...

CVE-2018-11052 Dell EMC ECS S3 Authentication Bypass Vulnerability

Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests...

Securing Containers at Scale: Amazon EKS, Amazon ECS and Deep Security Smart Check

Containers present a new opportunity for teams. An opportunity to deploy faster, more consistently, and with a simplicity rarely seen. But in order to make that happen a lot of infrastructure needs to be setup ahead of time. A cluster of hosts for the container runtime, an orchestration layer,...

Updated pdns packages fix security vulnerability

A stack-based buffer overflow in the dnsreplay tool occurring when replaying a specially crafted PCAP file with the --ecs-stamp option enabled, leading to a denial of service or potentially arbitrary code execution CVE-2018-1046...

How to Protect AWS ECS with SecureSphere WAF

Adoption of container technology is growing widely. More and more workloads are being transferred from traditional EC2 compute instances to container-based services. However, the need for securing the web traffic remains the same regardless of the elected platform. In this post, we’ll deep dive...

CVE-2017-8021

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

CVE-2017-8021

EMC Elastic Cloud Storage (ECS) before version 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system. The NVD entry for CVE-2017-8021 indicates a high-impact, unauthenticated, network-exposed issue with a ...

openSUSE Security Update : xtrabackup (openSUSE-2017-132)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 In addition, XtraBackup was updated to 2.3.6 to include the following improvements : - now supports SHA256 passwords - new supports command options for secure connectio...

Generalized Arbitrary File Download Vulnerability in ECS Education Building System

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. A generic arbitrary file download vulnerability exists in ECS, which can be exploited by attackers to obtain sensitiv...

ISC BIND 9.3.0 < 9.9.8-P3 / 9.9.x-Sx < 9.9.8-S4 / 9.10.x < 9.10.3-P3 Multiple DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper handling of certain string formatting options. An authenticated,...

Mageia: Security Advisory (MGASA-2016-0030)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bind -- denial of service vulnerability

ISC reports: Problems converting OPT resource records and ECS options to text format can cause BIND to terminate...

易创思(ECS)教育建站系统 BlogMoreIndex.aspx SQL注入

No description provided by source...

Fiyo CMS 2.0_1.9.1 SQL Injection

Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-393...

CVE-2011-0758

The eCS component ECSQdmn.exe in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service crash and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow...

Heap overflow

The eCS component ECSQdmn.exe in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service crash and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow...

CVE-2011-0758

CA ETrust Secure Content Manager (eCS ECSQdmn.exe) vulnerable to remote code execution via port 1882 due to a heap overflow caused by an improper DWORD value in a memory copy. Affected products: CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1. Exploitation is unauthenticated and ...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

CVE-2005-1433

Multiple unknown vulnjerabilities HP OpenView Event Correlation Services OV ECS 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code...

CVE-2005-1433

HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 are listed in CVE-2005-1433 with multiple unknown vulnerabilities that could lead to denial of service or arbitrary code execution. The provided connected documents confirm affected product/version details and impact but do not specify...