7192 matches found
CVE-2016-0914
EMC Documentum WebTop and related components are affected by CVE-2016-0914. The vulnerability allows remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface. Affected products/versions and patches (as described): WebTo...
Internet Bug Bounty: CVE-2016-0772 - python: smtplib StartTLS stripping attack
python smtplib starttls stripping attack affects: basically all versions of smtplib with starttls support and projects relying on it python 2.7.2 - 2.7.11 dates back 14 years python 3.0 - 3.5.1 dates back 7 years Python's implementation of smtplib fails to raise an exception upon an unexpected...
Apache Continuum 1.4.2 Command Injection / Cross Site Scripting
Exploit Title: Unauthenticated command injection - Apache Continuum Google Dork: inurl::8080/continuum/ Date: 04/06/2016 Exploit Author: David Shanahan @cyberpunksec Contact: http://www.procheckup.com/ Vendor Homepage: https://continuum.apache.org/ Software Link:...
Apache Continuum 1.4.2 - Multiple Vulnerabilities
Exploit Title: Unauthenticated command injection - Apache Continuum Google Dork: inurl::8080/continuum/ Date: 04/06/2016 Exploit Author: David Shanahan @cyberpunksec Contact: http://www.procheckup.com/ Vendor Homepage: https://continuum.apache.org/ Software Link:...
Apache Continuum 1.4.2 - Multiple Vulnerabilities
Apache Continuum 1.4.2 - Multiple Vulnerabilities Exploit Title: Unauthenticated command injection - Apache Continuum Google Dork: inurl::8080/continuum/ Date: 04/06/2016 Exploit Author: David Shanahan @cyberpunksec Contact: http://www.procheckup.com/ Vendor Homepage: https://continuum.apache.org...
WordPress SP Projects and Document Manager Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress SP Projects and Document Manager Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
[SECURITY] Fedora 23 Update: php-symfony-2.7.13-1.fc23
PHP framework for web projects...
[SECURITY] Fedora 22 Update: php-symfony-2.7.13-1.fc22
PHP framework for web projects...
[SECURITY] Fedora 24 Update: php-symfony-2.7.13-1.fc24
PHP framework for web projects...
CVE-2015-0858
Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...
CVE-2015-0857
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...
Design/Logic Flaw
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...
CVE-2015-0858
Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...
CVE-2015-0857
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...
CVE-2015-0857
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...
CVE-2015-0857
CVE-2015-0857 affects tardiff. The vulnerability arises from shell metacharacters in the name of a tar archive or a file within the archive, allowing arbitrary command execution. Public references in the provided documents consistently describe this issue, with Debian noting a fix in tardiff vers...
CVE-2015-0857
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...
CVE-2015-0858
Summary: CVE-2015-0858 affects tardiff (Cool Projects). The vulnerability is a local symlink attack on a pathname under /tmp/tardiff-$$, allowing local users to write to arbitrary files. Debian security advisory DLA-564-1 fixes this in tardiff version 0.1-1+deb7u1 for Debian 7 (Wheezy). CVSS data...
