4134 matches found
The vulnerability of the Linter Bastion database management system allows a malicious individual to control any service on a remote computer.
The RPC call with number 0x0A "0x0040AF25" allows a malicious individual to control any Windows service on a remote computer where linstmgr.exe is running, even though they have no authority to do so. This could enable the malicious individual to interfere with the normal operation of the service...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.
In the procedure “sub410855” for addresses “0x00410C32”, “0x00410D0C”, “0x00410D4B”, “0x00410DCF”, “0x00410EB1”, “0x00410F98”, “0x00410FEC”, “0x00411141”, there is no verification of the correctness of the input data. This may lead to buffer overflows during the processing of RPC calls with numbe...
The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.
The RPC call with number 0x12 "0x0040C73C" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...
The vulnerability of the Linter Bastion database management system allows a malicious individual to replace and execute the executable file.
If the database management system Linter Bastion was installed without the “loltp.exe” module being installed, a malicious individual can place any executable file named “loltp.exe” in a directory that will be scanned by the executable file loader. Then, using RPC calls with numbers 0x1A...
The vulnerability of the Linter Bastion database management system allows a malicious individual to increase their privileges.
The vulnerability in the RPC server linstmgr.exe was due to an erroneous assumption that only users with administrative privileges have access to connect to the server. This oversight, combined with the fact that the RPC server operates with the “SYSTEM” user account, allows for an increase in...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary services on a remote computer.
RPC call of number 0x08 "0x0040AB4E" allows a malicious individual to execute an arbitrary Windows service on a remote computer where linstmgr.exe is running, without having the necessary permissions. As a result, a service with vulnerabilities can be executed by the malicious individual, and tho...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.
In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...
The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.
The RPC call with number 0x19 "0x0040D8F0" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...
Six Apart Movable Type Pro and Advanced SQL Injection Vulnerabilities
Six Apart Movable Type MT is a blogging system from Six Apart Inc. in the U.S. Pro and Advanced are the professional and advanced versions of the system, respectively. A SQL injection vulnerability exists in Six Apart MT Pro and Advanced. The vulnerability can be exploited to execute arbitrary SQ...
CVE-2016-1543
The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...
CVE-2016-1542
The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...
SOL26738102 - BIG-IP APM SSO vulnerability CVE-2016-3687
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability
A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...
EMC Isilon OneFS and EMC IsilonSD Man-in-the-Middle Attack Vulnerabilities
EMC Isilon OneFS and EMC IsilonSD Edge are both products from EMC Corporation USA. The former is a distributed file system that supports EMC Isilon a horizontally scalable storage system, and the latter is a data management solution for simplifying data management in remote offices or edge...
Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through RPC requests from a remote location...
Exploit for CVE-2015-4870
CVE-2015-4870 MySQL DoS in the Procedure Analy...
MySQL 5.5.45 - procedure analyse Function Denial of Service
!/usr/bin/env python Title: MySQL Procedure Analyse DoS Exploit Author: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Version: Vulnerable upto MySQL 5.5.45 Original Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-487...
MySQL 5.5.45 - procedure analyse Function Denial of Service
Exploit for multiple platform in category dos / poc !/usr/bin/env python Title: MySQL Procedure Analyse DoS Exploit Author: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Version: Vulnerable upto MySQL 5.5.45 Original Write-up:...
MySQL 5.5.45 - procedure analyse Function Denial of Service
MySQL 5.5.45 - procedure analyse Function Denial of Service !/usr/bin/env python Title: MySQL Procedure Analyse DoS Exploit Author: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Version: Vulnerable upto MySQL 5.5.45 Original Write-up:...
MySQL Procedure Analyse Denial Of Service
!/usr/bin/env python Title: MySQL Procedure Analyse DoS Exploit Author: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Version: Vulnerable upto MySQL 5.5.45 Original Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-487...