WordPress Groovy Video Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

VMware Hyperic HQ Groovy Script-Console Java Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Groovy Media Player 3.2.0 (.mp3) - Buffer Overflow Vulnerability

No description provided by source. Title: ==== Groovy Media Player 3.2.0 Buffer Overflow Vulnerability Credit: ====== Name: Akshaysinh Vaghela Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== CVE-2013-2760 Reserved Date: ==== 21-03-2013 CL-ID: ====...

Groovy Media Player 2.6.0 - (.m3u) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Exploit Title: Groovy Media Player Version 2.6.0 .m3u Local Buffer Overflow PoC Date: 26/08/2011 Author: D3r K0n!G Software Link: http://www.bestwebsharing.com/groovy-media-player Category: Local Buffer Overflow PoC Version: 2.6.0 Tested on: Windo...

Jenkins Accessible without Credentials

The remote web server hosts Jenkins, a job scheduling / management system and a drop-in replacement for Hudson. By allowing unauthenticated access to the application, anyone may be able to configure Jenkins and jobs, and perform builds. Additionally, this script checks for unauthenticated access ...

CVE-2013-6366

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

Code injection

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

CVE-2013-6366

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

PT-2013-6013

Name of the Vulnerable Software and Affected Versions VMware Hyperic HQ version 4.6.6 Description The issue allows remote authenticated administrators to execute arbitrary code. This is achieved through a Runtime.getRuntime.exec call in the Groovy script console. Recommendations For version 4.6.6...

CVE-2013-6366: Improper Control of Generation of Code

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...

VMware Hyperic HQ Groovy Script-Console - Java Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VMware Hyperic HQ...

VMware Hyperic HQ Groovy Script-Console Java Execution Vulnerability

This Metasploit module uses the VMware Hyperic HQ Groovy script console to execute OS commands using Java. Valid credentials for an application administrator user account are required. This Metasploit module has been tested successfully with Hyperic HQ 4.6.6 on Windows 2003 SP2 and Ubuntu 10.04...

VMware Hyperic HQ Groovy Script-Console Java Execution

This module uses the VMware Hyperic HQ Groovy script console to execute OS commands using Java. Valid credentials for an application administrator user account are required. This module has been tested successfully with Hyperic HQ 4.6.6 on Windows 2003 SP2 and Ubuntu 10.04 systems. Module Options...

Groovy Shell Unauthenticated Remote Command Execution

The remote host has an unprotected Groovy Shell bound to a TCP port that is listening and allows for commands to be executed by an unauthenticated, remote attacker. This shell is known to be included with Lexmark Markvision. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2013-2760

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file...

Buffer overflow

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file...

CVE-2013-2760

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file...

CVE-2013-2760

CVE-2013-2760 affects Groovy Media Player 3.2.0. A buffer overflow in the handling of .m3u playlist files can allow an attacker to cause arbitrary code execution. Multiple sources (NVD, Red Hat advisory, Exploit-DB) describe the flaw as a memory boundary overrun triggered by a long string in an ....

PT-2013-3914

Name of the Vulnerable Software and Affected Versions Groovy Media Player version 3.2.0 Description The issue allows remote attackers to execute arbitrary code via a long string in a .m3u file. This is due to a buffer overflow in the software. Recommendations For Groovy Media Player version 3.2.0...

CVE-2013-2760: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file...