EUVD-2017-2572

Malware in sbrugna...

Cisco Unity Express Arbitrary Command Execution Vulnerability

A Java deserialization vulnerability in Cisco Unity Express CUE could allow an unauthenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An...

ZTE ZXIPTV-EPG Java Deserialization Vulnerability

ZTE ZXIPTV-EPG A set-top box device from China's ZTE Corporation ZTE. A Java deserialization vulnerability exists in ZTE ZXIPTV-EPG versions prior to 5.09.02.02T4. The vulnerability stems from the server's use of the Apache Commons Collections ACC library in the Java RMI service used, and can be...

CVE-2017-10934: Deserialization of Untrusted Data

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a...

CVE-2017-10932: Deserialization of Untrusted Data

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

Immunity Canvas: JAVA_RMI_SERVICE

Name| javarmiservice ---|--- CVE| NO-CVE Exploit Pack| CANVAS Description| javarmiservice Notes| References: 'https://docs.oracle.com/javase/8/docs/platform/rmi/spec/rmi-protocol3.html', 'https://docs.oracle.com/javase/7/docs/platform/rmi/spec/rmi-protocol3.html',...