15867 matches found
The vulnerability of the iOS operating system, which allows a hacker to execute arbitrary code
The vulnerability of the WebKit component of the iOS operating system arises from the distribution and initialization of resources using incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Upload and Execute
Push a file and execute it. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Upload and Execute', 'Description' = %qPush a file and execute it., 'Author' = 'egypt', 'License' = MSFLICENSE,...
CVE-2017-6554
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACTNEWFILESENT action...
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies...
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies...
CVE-2016-2555
SQL injection vulnerability in include/lib/mysqlconnect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php...
CVE-2015-8271
The AMF3CDAddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code...
Code injection
The AMF3CDAddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code...
Format string
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code...
CVE-2015-8107
CVE-2015-8107 affects GNU a2ps
CVE-2015-7564
Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...
CVE-2016-5313
Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...
CVE-2017-0106
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2016-4444
The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...
CVE-2016-4989
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...
Design/Logic Flaw
The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...
CVE-2016-4989
CVE-2016-4989 affects setroubleshoot and setroubleshoot-plugins. Local users can bypass container protections and execute arbitrary commands by triggering an SELinux denial via a crafted file name (handled by _set_tpath in audit_data.py) or via crafted local_id/analysis_id fields in a crafted XML...
Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
KLA11058 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Microsoft Edge. Malicious users can exploit these vulnerabilities to to gain privileges, execute arbitrary code, bypass security restrictions and obtain sensitive information. Below is a complete list of...