Fedora 25 : php-pear-PHP-CodeSniffer (2017-ca3f01bd37)

Version 2.8.1 - This release contains a fix for a security advisory related to the improper handling of shell commands - Uses of shellexec and exec were not escaping filenames and configuration settings in most cases - A properly crafted filename or configuration option would allow for arbitrary...

Fedora 24 : php-pear-PHP-CodeSniffer (2017-aaf92c483c)

Version 2.8.1 - This release contains a fix for a security advisory related to the improper handling of shell commands - Uses of shellexec and exec were not escaping filenames and configuration settings in most cases - A properly crafted filename or configuration option would allow for arbitrary...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts-Apache-ExploitPack These are just some scripts which yo...

New Struts2 Remote Code Execution exploit caught in the wild

Two days ago Apache has published a fix for the new Remote Code Execution vulnerability in Struts2. Struts2 RCE attacks in the wild This vulnerability allows attacker to execute arbitrary Java code on the application server. We can confirm that caught the first exploit for this vulnerability from...

Fully Featured Backdoor – Telegram C&C: BrainDamage

A python based backdoor which uses Telegram as C&C server. Features Persistance USB spreading Port Scanner Router Finder Run shell commands Keylogger Insert keystrokes Record audio Webserver Screenshot logging Download files in the host Execute shutdown, restart, logoff, lock Send drive tree...

Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02473)

Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the viewcert CGI /cgi-bin/viewcert component of the web management interface of Dell SonicWall Secure Remote Acces...

Design/Logic Flaw

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known...

CVE-2017-3806

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known...

CVE-2017-3796

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

CVE-2017-3796

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

Design/Logic Flaw

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

CVE-2017-3796

CVE-2017-3796 affects Cisco WebEx Meetings Server (CWMS). The issue enables an authenticated, remote attacker to trigger predetermined shell commands on other CWMS hosts. The root cause stems from insufficient security configurations of bash in interactive mode, allowing an attacker to execute co...

CVE-2017-3796

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6...

Cisco Webex Meetings Server Command Bypass Vulnerability

A vulnerability in Cisco Webex Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Zeroshell Remote Code Execution Vulnerability

Zeroshell is a Linux distribution for servers and embedded devices that aims to provide the main network services needed for a LAN. A remote code execution vulnerability exists in Zeroshell, which, by failing to properly filter user-submitted input, allows remote attackers to exploit the...

Design/Logic Flaw

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template...

Arbitrary Remote Code Execution Via Buffer Overflow

pycrypto is vulnerable to remote code execution RCE via heap buffer overflow attacks. There is a heap buffer overflow on ALGobject.IV in blocktemplace.c, where attackers can write as many bytes as they want on part of the heap, and exploit it to control the execution flow to execute shell command...

U.S. Dept Of Defense: Remote code execution on an Army website

A webserver hosted by the U.S. Army allowed the execution of local shell commands. meals was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks meals!...

U.S. Dept Of Defense: RCE on a Department of Defense website

A misconfigured webserver hosted by the Department of Defense allowed the execution of local shell commands. dawgyg was able to demonstrate this vulnerability by crafting a particularly formatted URL. Thanks dawgyg!...

WordPress XCloner 3.1.5 Denial Of Service / Code Execution

Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: www.xcloner.com Software Link:...