CVE-2019-12180

CVE-2019-12180 アドバイザリ & PoC SoapUI および ReadyAPI では、Apache Groovy Language スクリプトを使用してテストケースに動的コンテンツを作成または追加できます（例えば、その場でタイムスタンプを計算するなど）。これらのスクリプトの実行は多くの方法でトリガーでき、プロジェクトが保存されると XML "Project file" 内に保存されます。 "Load Script" 関数を使用すると、プロジェクトファイルが開かれたときに起動される Groovy スクリプトを作成できます（XML プロジェクトファイルの...

EUVD-2012-4458

Malware in sbrugna...

CVE-2023-3558

A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. It is possible to launch the attack...

CVE-2019-12180

An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy "Load Script" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code Java scripting language on the victim machine by inducing it ...

PT-2020-9297

Name of the Vulnerable Software and Affected Versions SmartBear ReadyAPI versions 2.8.2 through 3.0.0 SoapUI version 5.5 Description An issue was discovered that allows an attacker to execute arbitrary Groovy Language code on the victim machine by inducing it to open a malicious project. This...

CVE-2019-12180: Undefined Security Weakness

An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy "Load Script" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code Java scripting language on the victim machine by inducing it ...

PT-2019-9049 · Asus · Asus Rt-Ac3200

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC3200 version 3.0.0.4.382.50010 Description: The issue allows attackers to execute system commands via the "load script" URL parameter in the appGet.cgi file. This can be exploited by sending a malicious request to the "/appGet.cgi"...

WordPress Core Load Script Denial of Service (CVE-2018-6389)

A Denial of Service vulnerability exists within WordPress Core Load Script. This vulnerability is due to the way WordPress handles large array loads. Successful exploitation could lead to a denial of service...

DEBIAN-CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

kernel: stack disclosure in binfmt_script load_script()

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

UBUNTU-CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

PT-2012-5462 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.2 Description: The issue concerns the load script function in fs/binfmt script.c, which does not properly handle recursion. This allows local users to obtain sensitive information from kernel stack memory vi...