PT-2017-15592

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the server's update functionality, allowing specially crafted network packets to cause the device to overwrite sensitive files, resulting in code execution. An attacker must...

MacCMS suffers from xml entity injection vulnerability

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. MacCMS suffers from an xml entity injection vulnerability due to the system failing to disable XML entity parsing. An attacker can construct malicious requests to execute system commands on the target host t...

Uniview - Remote Command Execution Export Config (PoC)

Uniview - Remote Command Execution Export Config PoC STX Subject: Uniview RCE and export config PoC Researcher: bashis October 2017 Attack Vector: Remote Authentication: Anonymous no credentials needed Export config...

Authentication Bypass Vulnerability in S-CMS Backend

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is an authentication bypass vulnerability in the S-CMS backend and two sensitive files. The vulnerability is caused by the system's failure to accurately verify cookie information, and an attacker...

F5 Networks BIG-IP : BIG-IP virtual server with HTTP Explicit Proxy and/or SOCKS vulnerability (K02692210)

BIG-IP virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution ...

CVE-2017-10617

The ifmap service that comes bundled with Contrail has an XML External Entity XXE vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0...

PT-2017-11412 · Juniper Networks · Contrail

The ifmap service that comes bundled with Contrail has an XML External Entity XXE vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0...

Apache NiFi XML External Entity Injection Vulnerability

Apache NiFi is a system for processing and distributing data. Apache NiFi versions 1.0.0 through 1.3.0 suffer from an XML external entity injection vulnerability in the implementation, which allows an attacker to upload templates containing malicious code and access sensitive files via an XXE...

Xxe

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

CVE-2017-12623

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

CVE-2017-12623

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

CVE-2017-12623

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

CVE-2017-12623

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

PT-2017-12607

Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 1.4.0 Description The issue allows an authorized user to upload a template containing malicious code, which can then access sensitive files via an XML External Entity XXE attack. This occurs due to improper handli...

CVE-2017-1000104

The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient...

Ultimate HR System 1.2 Cross Site Scripting / Directory Traversal

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

Ultimate HR System 1.2 - Directory Traversal Cross-Site Scripting

Ultimate HR System 1.2 - Directory Traversal Cross-Site Scripting Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal:...

PT-2017-5955

Name of the Vulnerable Software and Affected Versions: ServiceDesk Plus MSP versions 5 through 9.0 v9030 AssetExplorer versions 4 through 6.1 SupportCenter versions 5 through 7.9 IT360 versions 8 through 10.4 Description: A directory traversal issue exists, allowing potential access to sensitive...

Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-220967)

Cisco Elastic Services Controller ESC is an open source modular system from Cisco.ConfD server is one of the configuration management servers. An information disclosure vulnerability exists in the ConfD server in Cisco ESC, which stems from the program's failure to adequately protect sensitive...

CVE-2017-6777

A vulnerability in the ConfD server of the Cisco Elastic Services Controller ESC could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerabilit...