CVE-2019-10074

An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the case for the Customer Request "story" input in the Order Manager application. Encoding should not be disabled without good reason and never...

TortoiseSVN <= 1.12.1 RCE Vulnerability

TortoiseSVN is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Atlassian Crowd 3.1.x < 3.1.6 RCE Vulnerability

According to its self-reported version number, the Atlassian Crowd application running on the remote host is 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5 or 3.4.x prior to 3.4.4. It is, therefore, affected by a remote code execution RCE vulnerability. An...

Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware

ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...

SEMrush Plugs Remote Code Execution Bug in Its SaaS Platform

UPDATE Search engine optimization and analytics firm SEMrush patched a remote code execution vulnerability that allowed an attacker to send a malicious image to its service and generate a reverse shell, a typical first stage in a cyberattack. Public disclosure of the vulnerability was Monday when...

NUUO NVR 1.7.x - 3.3.x RCE Vulnerability

NUUO Network Video Recorder NVR is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Exim 4.87 < 4.91 - (Local / Remote) Command Execution

Qualys Security Advisory The Return of the WIZard: RCE in Exim CVE-2019-10149 ======================================================================== Contents ======================================================================== Summary Local exploitation Remote exploitation - Non-default...

Exim 4.87 4.91 - (Local Remote) Command Execution

Exim 4.87 4.91 - Local Remote Command Execution Qualys Security Advisory The Return of the WIZard: RCE in Exim CVE-2019-10149 ======================================================================== Contents ======================================================================== Summary Local...

Dell Computer comes with system software, SupportAssist presence of a RCE vulnerability-vulnerability warning-the black bar safety net

! You use the computer what is the brand? You have on your computer system pre-installed or comes with the security of the software produced a suspect? When we talk about remote code execution vulnerability, RCE, may most people would think of it andoperating systemvulnerabilities, but there is n...

Cisco Service Provider, WebEx Bugs Offer Up Remote Code Execution

Cisco is warning of critical remote code-execution RCE vulnerabilities in the Cisco Prime Infrastructure PI and Evolved Programmable Network EPN Manager, which is used by telcos, mobile carriers, cable companies and ISPs to manage their hardware infrastructure. The vendor also issued estimated...

Dell Computer SupportAssist serious defects may lead to client-RCE-vulnerability warning-the black bar safety net

! Foreword You use a computer? Who made? Have you ever wanted your computer comes with what stuff? When it comes to the various remote code execution vulnerability, we might think ofoperating systemin such vulnerability, another attack vector is the”on my computer what are some third-party softwa...

Emerson Multiple RTUs TFTP Server RCE

Binary data 720175.prm...

Days thaw letter on ThinkPHP5. 1 framework conjunction with the RCE vulnerabilities in-depth analysis-vulnerability warning-the black bar safety net

The first few months, Thinkphp continuous outbreak of more serious vulnerabilities. Due to the framework of the application of the wide range of vulnerability impact is very large. In order to after the better defense and response to this framework for vulnerability, the alpha laboratory for...

Apache Tomcat RCE Vulnerability (Apr 2019) - Windows

Apache Tomcat is prone to a remote code execution RCE vulnerability due to a bug in the way the JRE passes command line arguments to Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Grandstream GXV3240 < 1.0.3.219 RCE

Binary data 700496.prm...

SUPEE-11086 - RCE, XSS, CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-11086...

GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3919)

Binary data gponcve-2019-3919.nbin...

Flash Player < 27.0.0.130 Multiple RCE (APSB17-28)

Binary data 700425.prm...

Flash Player < 28.0.0.161 Multiple RCE (APSB18-03)

Binary data 700430.prm...

(0Day) Hewlett Packard Enterprise Intelligent Management Center reportpage index Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...