Jenkins 2.150.2 - Remote Command Execution (Metasploit)

Jenkins 2.150.2 - Remote Command Execution Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Jenkins %q This module can run commands on the system using Jenkins user...

Jenkins 2.150.2 Remote Command Execution Via Node JS

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Jenkins %q This module can run commands on the system using Jenkins users who has JOB creation and BUILD privileges. The...

PT-2019-18701

Name of the Vulnerable Software and Affected Versions Enphase Envoy versions R3.. Description A directory traversal issue was found, which can be exploited via specific directories such as "images/", "include/", "include/js", or "include/css" on TCP port 8888. Recommendations For Enphase Envoy...

CVE-2019-1003012

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...

CVE-2019-1003012: Cross-Site Request Forgery (CSRF)

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...

CVE-2019-7328

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...

CVE-2019-7340

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...

PT-2019-11272

Name of the Vulnerable Software and Affected Versions: OPT/NET BV NG-NetMS versions v3.6-2 and earlier Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the /js/libs/jstree/demo/filebrowser/index.php page, where the id and operation GET parameters can be used to...

CVE-2019-7328: Improper Neutralization of Input During Web Page Generation

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...

PT-2019-18533 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable scale parameter value in the view frame. This is due to the omission ...

Directory0.js D-Link Router Disclosure

The vulnerability of the dirary0.js microprogramming software for D-Link DIR-140L and DIR-640L routers is related to the storage of user credentials in an open manner. Exploiting this vulnerability can allow a remote attacker to disclose the protected information administrator password...

libnmapp package command injection vulnerability

The libnmapp package is a package for accessing nmap from Node.js. A command injection vulnerability exists in versions of libnmapp package prior to 0.4.16. An attacker can exploit this vulnerability to inject arbitrary operating system commands via the range field...

Malicious Package

Overview All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script...

Design/Logic Flaw

A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page...

CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Fedora 28 : nodejs-JSV / nodejs-uri-js (2018-373bbbd408)

Update to latest nodejs-uri-js for CVE fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Sql injection

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

CVE-2018-20480

CVE-2018-20480 affects S-CMS 1.0. A SQL injection vulnerability exists in the js/pic.php file, exploitable through the P_id parameter. The root cause is improper handling of the P_id input leading to SQL injection. Impact details in the sources indicate potential data exposure/modification, but t...

CVE-2018-20480: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

PT-2018-15405

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description An issue in S-CMS allows SQL Injection via the P id parameter in the "js/pic.php" endpoint. Recommendations For S-CMS version 1.0, avoid using the P id parameter in the "js/pic.php" endpoint until the issue is...