Acontent code issue vulnerability

AContent is an online learning content creation tool and repository. A security vulnerability exists in Acontent 1.4 and earlier versions. An attacker can exploit the vulnerability by using a low-privileged account to run commands on the server...

File Upload Vulnerability in S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in the S-CMS enterprise website builder system. An attacker can exploit the vulnerability to writ...

Cisco Firepower Management Center SQL Injection Vulnerability (CNVD-2019-34714)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A SQL injection vulnerability exists in the web-based management interface in Cisco Firepower Management Center FMC, which stems from the program's failure to properly validate input, and...

The vulnerability of the Python script execution subsystem of the NX-OS network operating system allows a attacker to execute arbitrary commands on the underlying operating system.

The vulnerability of the Python script execution subsystem in the NX-OS network operating system is related to insufficient cleaning of user parameters used by certain Python functions in an isolated scripting environment. Exploiting this vulnerability allows a malicious actor to exit the isolate...

ZTE Anyservice suffers from s2-045 remote command execution vulnerability

ZTE Anyservice is a fast-response, highly customizable solution for customers. A s2-045 remote command execution vulnerability exists in the ZTE anyservice device, which allows attackers to remotely execute commands and gain server privileges...

s2-045 Remote Code Execution Vulnerability in the igateway Gateway System

The igateway gateway is a gateway system produced by Guangzhou Yihang Interconnection Communication Co. The igateway gateway system suffers from a s2-045 remote code execution vulnerability, which allows remote attackers to exploit the vulnerability to execute commands and gain server privileges...

USN-2303-1 unity vulnerability

It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly use this issue to run commands, and unlock the current session...

Poll It CGI 2.0 - exploit

No description provided by source. !/usr/bin/perl Poll It CGI v2.0 exploit keelis/havoc korp 2000 shouts to modjo, p, zen, kd, ab, all the script kiddies. keelisathushmaildotcom use Socket; $host, $cgiloc = @ARGV0,1; $ip=inetaton$host; print\n\t+--- Poll It CGI v2.0 exploit ---+; print\n\t+---...

Run a Command on Multiple Servers: ClusterSSH

Run a Command on Multiple Servers How to run a command on multiple servers at once? If you maintain multiple Linux servers, there are cases where you want to run the same commands on all the servers. For example, you may want to install/upgrade packages, patch the kernel, and update configuration...

USN-2184-2 unity vulnerabilities

USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue. We apologize for the inconvenience. Original advisory details: Frédéric Bardy discovered that Unit...

Rsync File Handling Integer Overflow (CVE-2003-0962)

RSync is an open source utility that provides fast incremental file transfer. There exists a heap overflow vulnerability in the Rsync server. The flaw is caused by an insufficient boundary checks when handling malformed requests. Successful exploitation would allow the attacker to overwrite, crea...