CVE-2019-3880

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions...

EulerOS Virtualization 2.5.3 : samba (EulerOS-SA-2019-1273)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the...

CVE-2017-8023

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service nsrexecd when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on t...

Remote code execution

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service nsrexecd when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on t...

CVE-2017-8023 EMC Networker Remote Code Execution Vulnerability

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service nsrexecd when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on t...

CVE-2017-8023: Improper Authentication

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service nsrexecd when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on t...

PT-2019-8606

Name of the Vulnerable Software and Affected Versions EMC NetWorker affected versions not specified Description The issue concerns an unauthenticated remote code execution in the Networker Client execution service nsrexecd when the oldauth authentication method is used. An unauthenticated remote...

. NET advanced code audit of the fifth classes . NET Remoting deserialization vulnerability-vulnerability warning-the black bar safety net

In recent days foreign security researcher Soroush Dalili @irsdl公布了.NET the Remoting application may exist deserializing a security risk, when the server using the HTTP channel of the SoapServerFormatterSinkProvider class as the channel of the receiver and will automatically deserialize the...

Revive Adserver: Deserialization of Untrusted Data in www/delivery/adxmlrpc.php

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize call on the "what" parameter in the "openads.spc" RPC method. Impact Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP...

CVE-2018-20811

A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12...

CVE-2018-20811

CVE-2018-20811 affects Pulse Secure Pulse Connect Secure: a hidden RPC service issue in PCS versions 8.3RX before 8.3R2 and 8.1RX before 8.1R12. Root cause is a hidden RPC service exposure, leading to potential partial confidentiality impact as indicated by the CVSS data (Network access, low atta...

CVE-2018-20811: Exposure of Sensitive Information to an Unauthorized Actor

A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12...

USN-3902-2: PHP vulnerabilities

USN-3902-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash,...

Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3902-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3902-1 advisory. It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause...

PT-2019-3572

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 8.4.1 Description The issue is related to a stack-based buffer overflow that allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message. This is due to improper...

Ubuntu: Security Advisory (USN-3902-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3902-1: PHP vulnerabilities

It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. CVE-2019-9020, CVE-2019-9024 It was discovered that the PHP PHAR module incorrectly handled certain...

CVE-2018-20587

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port...

Design/Logic Flaw

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port...

CVE-2018-20587

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port...