CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21998469)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass Vulnerability

Exploit for java platform in category web applications Title: ManageEngine ServiceDesk Plus Application Compromise Date: 19 May 2017 Researcher: Steven Lackey ByteM3 Product: ServiceDesk Plus http://www.manageengine.com/ Affected Version: 9.0 Other versions could also be affected Fixed Version:...

Juniper Networks NorthStar Controller Application Information Disclosure Vulnerability

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An information disclosure vulnerability exists in Juniper Networks NorthSta...

Juniper Networks NorthStar Controller Application Command Injection Vulnerability

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A command injection vulnerability exists in Juniper Networks NorthStar...

Juniper Networks NorthStar Controller Application Denial of Service Vulnerability (CNVD-2017-07226)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A security vulnerability exists in Juniper Networks NorthStar Controller...

Juniper Networks NorthStar Controller Application Buffer Overflow Vulnerability (CNVD-2017-07222)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A buffer overflow vulnerability exists in Juniper Networks NorthStar...

Juniper Networks NorthStar Controller Application Remote Elevation of Privilege Vulnerability (CNVD-2017-07238)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A remote elevation of privilege vulnerability exists in Juniper Networks...

Veeam Management Pack for System Center integration with OMS

Challenge This KB contains information about the latest version of Veeam Management Pack integration with Microsoft Operations Management Suite. Cause The current version of OMS integration consists of the following components: - Veeam MP OMS Integration Pack MPB file that should be imported in...

Unspecified Denial of Service Vulnerability in Juniper Networks NorthStar Controller Application

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An unspecified denial of service vulnerability exists in Juniper Networks...

Juniper Networks NorthStar Controller Application Denial of Service Vulnerability (CNVD-2017-07224)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A denial of service vulnerability exists in Juniper Networks NorthStar...

Juniper Networks NorthStar Controller Application Remote Elevation of Privilege Vulnerability (CNVD-2017-07239)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A privilege-granting and access control vulnerability exists in Juniper...

Juniper Networks NorthStar Controller Application Local Information Disclosure Vulnerability

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An information disclosure vulnerability exists in Juniper Networks NorthSta...

Juniper Networks NorthStar Controller Application Buffer Overflow Vulnerability

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A buffer overflow vulnerability exists in Juniper Networks NorthStar...

Release Notes for Veeam Management Pack 8.0 Update 4

Challenge Release Notes for Veeam Management Pack 8.0 Update 4. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be 8.0.0.2218 or later...

Juniper Networks NorthStar Controller Application Denial of Service Vulnerability (CNVD-2017-07225)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A denial of service vulnerability exists in Juniper Networks NorthStar...

Microsoft Windows 8/8.1/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010)

!/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target EDB Note: Shellcode - x64...

Microsoft Windows 72008 R2 - EternalBlue SMB Remote Code Execution (MS17-010)

Microsoft Windows 72008 R2 - EternalBlue SMB Remote Code Execution MS17-010 !/usr/bin/python from impacket import smb from struct import pack import sys import socket ''' EternalBlue exploit for Windows 7/2008 by sleepya The exploit might FAIL and CRASH a target system depended on what is...

CVE-2017-6890

A boundary error within the "foveonloadcamf" function dcrawfoveon.c when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow...

Stack overflow

A boundary error within the "foveonloadcamf" function dcrawfoveon.c when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow...