EUVD-2018-14241

Malware in sbrugna...

EUVD-2018-14245

Malware in sbrugna...

EUVD-2018-14242

Malware in sbrugna...

EUVD-2018-14277

Malware in sbrugna...

EUVD-2018-14239

Malware in sbrugna...

EUVD-2018-14294

Malware in sbrugna...

EUVD-2018-14243

Malware in sbrugna...

EUVD-2018-14251

Malware in sbrugna...

EUVD-2018-14278

Malware in sbrugna...

EUVD-2018-14238

Malware in sbrugna...

EUVD-2018-14249

Malware in sbrugna...

EUVD-2018-14240

Malware in sbrugna...

EUVD-2018-14293

Malware in sbrugna...

EUVD-2018-14275

Malware in sbrugna...

EUVD-2018-14276

Malware in sbrugna...

EUVD-2018-14246

Malware in sbrugna...

EUVD-2018-14244

Malware in sbrugna...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...

Metasploit Wrap-Up

SAP Internet Graphics Server IGS This week includes a new module targeting the SAP Internet Graphics Server application, contributed by community member Vladimir Ivanov. This particular module covers two CVEs that are both XML External Entity XXE bugs that are remotely exploitable. The module com...

Input validation

The SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation for example, where the request is validated for authenticity and validity and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server IGS d...