Sql injection

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

CVE-2017-11469

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

Directory traversal

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

CVE-2017-11469

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11471

CVE-2017-11471 affects IDERA Uptime Monitor 7.8. SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter enables arbitrary SQL execution. CVSS metrics indicate high to critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitat...

CVE-2017-11469

CVE-2017-11469 affects IDERA Uptime Monitor 7.8. get2post.php’s file_name parameter allows directory traversal, enabling reading arbitrary host files. This is a confirmed path traversal vulnerability, with the CNVD/NVD entries describing read access. No patch/versioned remediation is provided in ...

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

CVE-2017-11470

CVE-2017-11470 affects IDERA Uptime Monitor 7.8. The vulnerability is an SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter. NVD lists CVSS v2 base 7.5 (HIGH) and CVSS v3 base 9.8 (CRITICAL). Exploitation status is not provided in the sou...

USN-3355-1 spice vulnerability

Frediano Ziglio discovered that Spice incorrectly handled certain invalid monitor configurations. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-3355-1: Spice vulnerability

Frediano Ziglio discovered that Spice incorrectly handled certain invalid monitor configurations. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code...

Adware the series, the final: Tools section

So far in this series, we have handed you some methods to recognize and remediate adware. We used this diagram as a guideline. During this journey, we have touched upon several free tools that we used to get some insight on what type of infection we were dealing with and where the adware could be...

CVE-2017-4918: VMware Horizon macOS client code injection vulnerability analysis-vulnerability warning-the black bar safety net

This article I want to discuss under the VMware Horizon macOS client version 4. 4. 0, the 5164329 of a code injection vulnerability, which can be used to obtain local root privileges. The good news is this issue already in the latest version is fix. 0x01 analysis On my MAC the above understanding...

CVE-2017-1000362

The vulnerability CVE-2017-1000362 affects Jenkins (re-key admin monitor). In Jenkins 1.498, secrets were re-encrypted with a new key and a backup directory at JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups was created containing the old, unremoved secrets; these backups were world...

Microsoft Windows XML External Entity Local Information Disclosure Vulnerability

Microsoft windows is a popular operating system. Microsoft Windows Performance Monitor does not properly parse XML inputs that contain references to external entities, allowing an attacker to exploit the vulnerability by submitting a special XML request to obtain sensitive information and read...

Microsoft Windows Multiple Vulnerabilities (KB4025337)

This host is missing a critical security update according to Microsoft KB4025337 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...