PT-2019-14244

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.3 Description The issue allows for arbitrary file upload, which can be exploited by uploading a .php file to the "admin/filemanager" endpoint in the File Management Module. This can lead to remote code execution when visiti...

F5 SSL Orchestrator Input Validation Error Vulnerability

F5 SSL Orchestrator is an all-in-one appliance solution for SSL infrastructures from F5, Inc. that provides policy-based dynamic decryption, encryption and traffic control. An input validation error vulnerability exists in F5 SSL Orchestrator. An attacker could exploit this vulnerability to cause...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2019-30618)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a TMM reboot, resulting ...

Zotonic < 0.47.0 mod_admin - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Zotonic prompt‘XSS’ Affected source code file zotonicmodadmin: - zotonicmodadminidentity\priv\templates\adminsortheader.tpl - zotonicmodadminidentity\priv\templates\adminusers.tpl References...

Zotonic 0.46 mod_admin Cross Site Scripting

Exploit Title: Zotonic prompt‘XSS’ Affected source code file zotonicmodadmin: - zotonicmodadminidentity\priv\templates\adminsortheader.tpl - zotonicmodadminidentity\priv\templates\adminusers.tpl References http://docs.zotonic.com/en/latest/developer-guide/releasenotes/rel0.47.0.html...

Zotonic 0.47.0 mod_admin - Cross-Site Scripting

Zotonic 0.47.0 modadmin - Cross-Site Scripting Exploit Title: Zotonic prompt‘XSS’ Affected source code file zotonicmodadmin: - zotonicmodadminidentity\priv\templates\adminsortheader.tpl - zotonicmodadminidentity\priv\templates\adminusers.tpl References...

Zotonic < 0.47.0 mod_admin - Cross-Site Scripting

Exploit Title: Zotonic prompt‘XSS’ Affected source code file zotonicmodadmin: - zotonicmodadminidentity\priv\templates\adminsortheader.tpl - zotonicmodadminidentity\priv\templates\adminusers.tpl References http://docs.zotonic.com/en/latest/developer-guide/releasenotes/rel0.47.0.html...

CVE-2019-6157

In various firmware versions of Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server's private key in the generated log file for support...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in GNU glibc (CVE-2018-11236)

Summary IBM Advanced Management Module AMM has addressed the following vulnerability in GNU glibc. Vulnerability Details CVEID: CVE-2018-11236 DESCRIPTION: GNU glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds of checking by the pathname arguments in the realpath...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in GNU glibc (CVE-2017-15804 CVE-2017-15670 CVE-2015-5180)

Summary IBM Advanced Management Module AMM has addressed the following vulnerabilities in GNU glibc. Vulnerability Details CVEID: CVE-2017-15804 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a buffer overflow, caused by improper bounds checking by glob function in glob.c. By usin...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in python (CVE-2018-1061 CVE-2018-1060 CVE-2016-5636)

Summary IBM Advanced Management Module AMM has addressed the following vulnerabilities in python. Vulnerability Details CVEID: CVE-2018-1061 DESCRIPTION: Python is vulnerable to a denial of service, caused by catastrophic backtracking in the difflib.ISLINEJUNK method. A remote attacker could...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)

Summary IBM Advanced Management Module AMM has addressed the following vulnerabilities in cURL. Vulnerability Details CVEID: CVE-2018-16842 DESCRIPTION: cURL could allow a remote attacker to obtain sensitive information, caused by a heap-based buffer over-read in the display function in the comma...

CVE-2019-9662

An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...

CVE-2019-9662: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...

Security Bulletin: IBM Chassis Management Module (CMM) is affected by OpenSLP vulnerability (CVE-2017-17833)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details CVEID: CVE-2017-17833 Description: OpenSLP, as used in multip...

Security Bulletin: Vulnerability in PHP affect IBM Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in PHP. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in PHP. Vulnerability Details CVEID: CVE-2016-10397 Description: PHP could allow a remote attacker ...

Security Bulletin: Vulnerabilities in expat affect IBM Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in expat CVE-2017-9233 CVE-2016-9063 Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in expat CVE-2017-9233 CVE-2016-9063 Vulnerability Details CVEID:...

Security Bulletin: Vulnerability in libxml2 affects IBM Chassis Management Module (CVE-2017-8872)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in libxml2. Vulnerability Details CVEID: CVE-2017-8872 Description: libxml2 is vulnerable to a...

Security Bulletin: Vulnerability in strongSwan affects IBM Chassis Management Module (CVE-2017-11185)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in strongSwan. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in strongSwan. Vulnerability Details CVEID: CVE-2017-11185 Description: strongSwan is...

Security Bulletin: Vulnerabilities in OpenSSH affect IBM Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in OpenSSH. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in OpenSSH. Vulnerability Details CVEID: CVE-2016-10011 Description: OpenSSH could allow a...