953 matches found
CVE-2017-12477
It was discovered that the bpserverd proprietary protocol in Unitrends Backup UB before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system...
CVE-2017-9482
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain root access to the Network Processor NP Linux system by enabling a TELNET daemon through CVE-2017-9479 exploitation and then establishing a TELNET session...
CVE-2017-9479
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a...
CVE-2017-9482: Incorrect Permission Assignment for Critical Resource
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain root access to the Network Processor NP Linux system by enabling a TELNET daemon through CVE-2017-9479 exploitation and then establishing a TELNET session...
Citrix SD-WAN 9.1.2.26.561201 Remote Command Injection
Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity Date: 02/20/2017 Exploit Author: xort @ Critical Start Vendor Homepage: www.citrix.com Software Link: https://www.citrix.com/downloads/cloudbridge/ Version: 9.1.2.26.561201 Tested on: 9.1.2.26.561201 OS...
Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)
Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity Date: 02/20/2017 Exploit Author: xort @ Critical Start Vendor Homepage: www.citrix.com Software Link: https://www.citrix.com/downloads/cloudbridge/ Version: 9.1.2.26.561201 Tested on: 9.1.2.26.561201 OS...
Barracuda Load Balancer Firmware 6.0.1.006 Remote Root
Exploit Title: Barracuda Load Balancer Firmware 'Barracuda Load Balancer Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Load Balancer Firmware Version = v6.0.1.006 2016-08-19 by exploiting a vulnerability in the web administration interface. By sending ...
Barracuda Load Balancer Firmware 6.0.1.006 - Remote Command Injection (Metasploit)
Barracuda Load Balancer Firmware 6.0.1.006 - Remote Command Injection Metasploit Exploit Title: Barracuda Load Balancer Firmware 'Barracuda Load Balancer Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Load Balancer Firmware Version = v6.0.1.006 2016-08-...
CVE-2017-1000060
EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...
CVE-2017-1000060
EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...
Sql injection
EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...
CVE-2017-1000060: Improper Neutralization of Special Elements used in an SQL Command
EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...
CVE-2017-1000060
EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...
CVE-2017-1000060
EyesOfNetwork (EON) 5.1 has an unauthenticated SQL Injection in the web interface (eonweb) that leads to remote root. The vulnerability is described across multiple connected records as existing in EyesOfNetwork 5.1-0 and is related to CVE-2017-1000060. The root cause is an SQL injection vulnerab...
The vulnerability of the Linux operating system allows a hacker to trigger a service failure or gain superuser privileges.
The vulnerability of the dccprcvstateprocess function in the net/dccp/input.c file of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain superuser privileges by improperly managing the...
CVE-2017-9828
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera...
Exploit for Code Injection in Samba
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494...
Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability
The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...
Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability (CNVD-2017-06838)
The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...
Tenable Appliance < 4.5 - Unauthenticated Remote Root Code Execution Exploit
Exploit for linux platform in category remote exploits !/bin/bash : ' According to http://static.tenable.com/proddocs/upgradeappliance.html they fixed two security vulnerabilities in the web interface in release 4.5 so I guess previous version are also vulnerable. Exploit Title: Unauthenticated...