TeamCity Agent XML-RPC Command Execution Exploit

This Metasploit module allows remote code execution on TeamCity Agents configured to use bidirectional communication via xml-rpc. In bidirectional mode the TeamCity server pushes build commands to the Build Agents over port TCP/9090 without requiring authentication. Up until version 10 this was t...

TeamCity Agent XML-RPC Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TeamCity Agent XML-RPC Command Execution', 'Description' = %q This module allows remote code execution on TeamCity Agents configured to use...

eth-cobra (>=0.1.0, <=0.1.1), eth-pm (0.1.0a23) +12 more potentially affected by CVE-2018-18920 via py-evm (>=0.2.0a16, <=0.2.0a33)

py-evm PYPI version =0.2.0a16, =0.1.0, =0.1.0b1, =0.1.0a18, =0.2.0rc1, =1.0.0a1, =0.1.2a2, =0.8.0, =0.0.1a3, =0.2.0, =0.1.0a12, =0.1.2b2, =0.1.2b4 Source cves: CVE-2018-18920 Source advisory: GHSA-VQGP-4JGJ-5J64...

eth-cobra (>=0.1.0, <=0.1.1), eth-pm (0.1.0a23) +12 more potentially affected by CVE-2018-18920 via py-evm (>=0.2.0a16, <=0.2.0a33)

py-evm PYPI version =0.2.0a16, =0.1.0, =0.1.0b1, =0.1.0a18, =0.2.0rc1, =1.0.0a1, =0.1.2a2, =0.8.0, =0.0.1a3, =0.2.0, =0.1.0a12, =0.1.2b2, =0.1.2b4 Source cves: CVE-2018-18920 Source advisory: OSV:GHSA-VQGP-4JGJ-5J64...

Stack overflow

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted...

CVE-2009-5153

CVE-2009-5153 affects Novell NetWare prior to 6.5 SP8. A stack buffer overflow occurs in the processing of CALLIT RPC calls within the PKERNEL.NLM NFS Portmapper daemon. The overflow is triggered by trusting a length field, allowing remote, unauthenticated attackers to execute code. This is the r...

PT-2018-4025

Name of the Vulnerable Software and Affected Versions Novell NetWare versions prior to 6.5 SP8 Description A stack buffer overflow issue exists in the processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM, allowing remote unauthenticated attackers to execute code. This occurs...

CVE-2009-5153: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted...

Windows Remote Procedure Call Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Remote Procedure Call RPC runtime improperly initializes objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...

Vulnerable domain identification

Identifying potentially vulnerable Exchange endpoints Module Options msf use auxiliary/scanner/msmail/host/id msf undefinedid show actions ...actions... msf undefinedid set ACTION msf undefinedid show options ...show and set options... msf undefinedid run...

glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code

It was found that glusterfs server is vulnerable to mulitple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca3'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffe...

WordPress 3.7.x < 3.7.21 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress 4.5.x < 4.5.9 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress 4.1.x < 4.1.18 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress 4.4.x < 4.4.10 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress 3.9.x < 3.9.19 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

CVE-2018-14653

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the 'servergetspec' function via the 'gfgetspecreq' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact...

CVE-2018-14653

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the 'servergetspec' function via the 'gfgetspecreq' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact...

CVE-2018-14653

CVE-2018-14653 affects GlusterFS up to versions 4.1.4 and 3.12, with a heap-based buffer overflow in the __server_getspec path triggered by the gf_getspec_req RPC message. A remote authenticated attacker could cause a denial of service and potentially other unspecified impact. Connected advisorie...

CVE-2018-14653

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the 'servergetspec' function via the 'gfgetspecreq' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact...