Collectric CMU 1.0 - lang Hard-Coded Credentials SQL injection

Collectric CMU 1.0 - lang Hard-Coded Credentials SQL injection Exploit Title: Collectric CMU 1.0 - 'lang' SQL injection Google Dork: "Inloggning Collectric CMU" Discoverer: Simon Brannstrom Date: 2018-09-15 Vendor Homepage: http://ourenergy.se/ Software Link: n/a Version: All known versions Teste...

Arbitrary File Read And Write

org.apache.karaf.shell.core is vulnerable to arbitrary file read and write. A user with rights to the Karaf console is able to read or write any file on the file system, which would allow an attacker with access to the sshd service to abuse the vulnerability to read or write arbitrary files on th...

CVE-2018-11786

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

CVE-2018-11786

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

CVE-2018-11786: Improper Privilege Management

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

PT-2018-10820

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 4.2.0 Description The issue allows any user with rights to the Karaf console to read and write files on the file system that the Karaf process user has access to, if the sshd service is enabled. This can be...

EulerOS 2.0 SP1 : openssh (EulerOS-SA-2018-1068)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence...

Solaris 10 (x86) : 123325-03

SunOS 5.10x86: sshd patch. Date this patch was last updated by Sun : Jun/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 148104-26

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Feb/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 148105-23

SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 10 (sparc) : 148104-11

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Jul/11/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 123324-03

SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 148104-21

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Nov/12/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 148105-26

SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Feb/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +10 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.56)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =0.14 Source cves: CVE-2017-1000356 Source advisory: MEND:CVE-2017-1000356...

CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c...

CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c...

CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c...

UBUNTU-CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c...

CVE-2016-10708: NULL Pointer Dereference

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c...