CVE-2018-12414

The CVE-2018-12414 entry affects TIBCO Rendezvous components (rvrd, rvrsd, rvsd, rvcache, rvdm) and related editions. A CSRF flaw exists that could let an attacker reconfigure messaging and potentially access all data routed by RV. Affected versions are: RV 8.4.5 and earlier, RV Developer Edition...

Microsoft Windows: Microsoft network server: Digitally sign communications (always)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnssigncommunicationalways.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Digitally sign communications always Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Microsoft network server: Amount of idle time required before suspending session

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsidletimesuspending.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Amount of idle time required before suspending session Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Microsoft network server: Digitally sign communications (if client agrees)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnssigncommunicationpossible.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Digitally sign communications if client agrees Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Microsoft network server: Disconnect clients when logon hours expire

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsdisconnectlogonhoursexpires.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Disconnect clients when logon hours expire Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Microsoft network server: Server SPN target name validation level

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsspnvalidationlevel.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Server SPN target name validation level Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2016-10655

The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is...

dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root...

UBUNTU-CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

Design/Logic Flaw

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

DEBIAN-CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

Onethink CMS Server Side Request Forgery

SSRFPS"Server Side Request ForgeryPSc in Onethink All version CVE-2017-14323 The Onethink is an open source CMSContent Management System.This system is based on the Thinkphp3.2 development framework. Product Download: http://www.onethink.cn Vulnerability TypePSoSSRFPS"Server Side Request ForgeryP...

The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges

The vulnerability of the sudo component in the Mac OS X operating system is related to improper handling of permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges by using administrative group membership on the network server...

CVE-2017-0199: Microsoft Office RTF vulnerability using the PoC-vulnerability warning-the black bar safety net

0x01 description From FireFye detect and publish CVE-2017-0199 since, I have been researching this vulnerability in Microsoft officially released the patch, I decided to release this PoC. I use way possible with other researchers using different methods, the use of the method may be little bit...

GLSA-201603-01 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-01 GIMP: Multiple vulnerabilities GIMPs network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally, the X Window Dump X...

GIMP: Multiple vulnerabilities

Background GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. Description GIMP’s network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally...

miniupnpc: arbitrary code execution

An exploitable buffer overflow vulnerability exists in the XML parser functionality of the MiniUPnP library. A specially crafted XML response can lead to a buffer overflow on the stack resulting in remote code execution. An attacker can set up a server on the local network to trigger this...