Cisco Prime Data Center Network Manager Arbitrary File Upload Vulnerability

Exploit for java platform in category remote exploits require 'msf/core' class Metasploit3 'Cisco Prime Data Center Network Manager Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This Metasploit module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in processImageSave.jsp, which can be abused through a directory traversal and a null byte injection to upload arbitrary files. The autodeploy JBoss application server feature is...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cisco Prime Data Center Network Manager Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Cisc...

Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cisco Prime Data Center Network Manager Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Cisc...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in processImageSave.jsp, which can be abused through a directory traversal and a null byte injection to upload arbitrary files. The autodeploy JBoss application server feature is used to...

Microsoft RC4 Disabling Security Advisory (2868725)

This host is missing an important security update according to Microsoft advisory 2868725. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Graphics Device Interface RCE Vulnerability (2876331)

This host is missing a critical security update according to Microsoft Bulletin MS13-089. OpenVAS Vulnerability Test $Id: secpodms13-089.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Graphics Device Interface RCE Vulnerability 2876331 Authors: Shashi Kiran N Copyright: Copyright C 2013...

Microsoft Windows Ancillary Function Driver Information Disclosure Vulnerability (2875783)

This host is missing an important security update according to Microsoft Bulletin MS13-093 SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Digital Signatures Denial of Service Vulnerability (2868626)

This host is missing an important security update according to Microsoft Bulletin MS13-095. OpenVAS Vulnerability Test $Id: secpodms13-095.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Digital Signatures Denial of Service Vulnerability 2868626 Authors: Shashi Kiran N Copyright: Copyright...

Symantec Workspace Streaming 7.5.0.493 SWS Streamlet Engine Invoker Servlets Remote Code Execution

Symantec Workspace Streaming 7.5.0.493 SWS Streamlet Engine Invoker Servlets Remote Code Execution tested against: Microsoft Windows Server 2008 R2 sp1 download url: http://www.symantec.com/it/it/products-solutions/trialware/ file tested: SymantecWorkspaceStreaming7.5.0.493.zip vulnerability: the...

Symantec Workspace Streaming 7.5.0.493 Rmote Code Execution

Symantec Workspace Streaming version 7.5.0.493 suffers from a SWS streamlet engine invoker servlets remote code execution vulnerability. Proof of concept code included. Symantec Workspace Streaming 7.5.0.493 SWS Streamlet Engine Invoker Servlets Remote Code Execution tested against: Microsoft...

Symantec Workspace Streaming 7.5.0.493 Rmote Code Execution

Symantec Workspace Streaming 7.5.0.493 SWS Streamlet Engine Invoker Servlets Remote Code Execution tested against: Microsoft Windows Server 2008 R2 sp1 download url: http://www.symantec.com/it/it/products-solutions/trialware/ file tested: SymantecWorkspaceStreaming7.5.0.493.zip vulnerability: the...

McAfee Web Reporter JBoss EJBInvokerServlet Marshalled Object Code Execution

Added: 10/23/2013 CVE: CVE-2013-4810 BID: 62854 OSVDB: 97153 Background McAfee Web Reporter analyzes logs from a variety of proxy sources to provide real-time views into web traffic, including extensive drill-down capabilities and powerful off-line processing. Problem McAfee Web Reporter is...

MS KB2532445: AppLocker Rules Bypass

The remote host is missing Microsoft KB2532445, an update that prevents an attacker from bypassing AppLocker rules by using an Office macro. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70395; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15 20:50:28";...

CVE-2013-3881

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."...

Design/Logic Flaw

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."...

CVE-2013-3881

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing an critical security update according to Microsoft Bulletin MS13-083. OpenVAS Vulnerability Test $Id: secpodms13-083.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Comctl32 Integer Overflow Vulnerability 2864058 Authors: Shashi Kiran N Copyright: Copyright c 2013 SecPod,...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing a critical security update according to Microsoft Bulletin MS13-083. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-080: Description of the security update for Internet Explorer 11 in Windows 8.1 and Windows Server 2012 R2: October 8, 2013

Resolves vulnerabilities in Internet Explorer 11 that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.INTRODUCTIONMicrosoft has released security bulletin MS13-080. To view the complete security bulletin, go to one of the following Microsoft...