Code Execution Vulnerability in the File Management System of Laoban CMS Backend

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A code execution vulnerability exists in the background file management of Laoban CMS. An attacker can exploit the vulnerability to...

[SECURITY] Fedora 27 Update: git-annex-6.20180626-1.fc27

Git-annex allows managing files with git, without checking the file contents into git. While that may seem paradoxical, it is useful when dealing with f iles larger than git can currently easily handle, whether due to limitations in memory, time, or disk space. It can store large files in many...

Pure python post-exploitation RAT for macOS & OSX: EvilOSX

A pure python, post-exploitation, RAT Remote Administration Tool for macOS / OSX. Features Emulate a simple terminal instance Undetected by anti-virus OpenSSL AES-256 encrypted payloads, HTTPS communication Multi-threaded No client dependencies pure python Persistent Simple extendable module syst...

Security Bulletin: Multiple Samba vulnerability affects IBM Storwize V7000 Unified (CVE-2017-15275, CVE-2017-14746 )

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerability. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-15275...

Security Bulletin: Samba vulnerability affects IBM SONAS (CVE-2017-2619)

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerability. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-2619 DESCRIPTION: Samba could allow a remote...

Security Bulletin: Samba vulnerability issue affects IBM Storwize V7000 Unified (CVE-2017-9461)

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerability. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-9461...

Security Bulletin: Samba vulnerability affects IBM SONAS (CVE-2017-9461)

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerability. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-9461 DESCRIPTION: Samba is vulnerable to a...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-7494...

Security Bulletin: Samba vulnerability issue in IBM SONAS (CVE-2017-7494)

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-7494 DESCRIPTION: Samba could allow a remo...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2016-2125, CVE-2016-2126)

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2016-2125...

Security Bulletin: Samba vulnerability issue in IBM SONAS (CVE-2016-2119)

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2016-2119 DESCRIPTION: Samba could allow a remo...

Security Bulletin:Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2016-2119)

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2016-2119...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2015-0240)

Summary A fix is available for IBM Storwize V7000 Unified, for the security issue that an attacker could execute arbitrary code on the system by exploiting a vulnerability in Samba Vulnerability Details CVEID: CVE-2015-0240 DESCRIPTION: Samba is used in IBM Storwize V7000 Unified to enable file...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2014-3493)

Summary A fix is available for IBM Storwize V7000 Unified, for the security issue that an attacker could crash applications by exploiting a vulnerability in Samba Vulnerability Details CVEID: CVE-2014-3493 DESCRIPTION: Samba is used in IBM Storwize V7000 Unified to enable file management and...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2014-0178)

Summary A fix is available for IBM Storwize V7000 Unified, for the security issue that an attacker could obtain sensitive information by exploiting a vulnerability in Samba Vulnerability Details CVE-2014-0178 DESCRIPTION: Samba is used in IBM Storwize V7000 Unified to enable file management and...

Security Bulletin: Samba vulnerability issue on SONAS (CVE-2013-4408 and CVE-2012-6105)

Summary An attacker could gain privileged access to SONAS system by exploiting a vulnerability in Samba. Vulnerability Details CVE ID: CVE-2013-4408 and CVE-2012-6105 DESCRIPTION: This issue affects only those SONAS systems that use Active Directory server for authentication. Configuration with...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2013-4408 and CVE-2012-6105)

Summary An attacker could gain privileged access to IBM Storwize V7000 Unified system by exploiting a vulnerability in Samba. Vulnerability Details CVE ID: CVE-2013-4408 and CVE-2012-6105 DESCRIPTION: This issue affects only those IBM Storwize V7000 Unified systems that use Active Directory serve...

Default credentials

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file...

DedeCMS Arbitrary File Write Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval of PHP Web site content management system CMS. A security vulnerability exists in the file...

Race condition

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...