PT-2017-2784 · Supervisor +1 · Supervisor +1

Name of the Vulnerable Software and Affected Versions: Supervisor versions prior to 3.0.1 Supervisor versions 3.1.x prior to 3.1.4 Supervisor versions 3.2.x prior to 3.2.4 Supervisor versions 3.3.x prior to 3.3.3 Description: The XML-RPC server in Supervisor allows remote authenticated users to...

Debian DLA-1047-1 : supervisor security update

A vulnerability has been found in supervisor, a system for controlling process state, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. For Debian 7...

[SECURITY] [DLA 1047-1] supervisor security update

Package : supervisor Version : 3.0a8-1.1+deb7u2 CVE ID : CVE-2017-11610 Debian Bug : 870187 A vulnerability has been found in supervisor, a system for controlling process state, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell command...

DLA-1047-1 supervisor - security update

Bulletin has no description...

Supervisor Remote Command Execution Vulnerability

Supervisor is a client/server system developed in Python that manages and monitors processes on UNIX-like operating systems. It can start and shut down multiple processes at the same time. A remote command execution vulnerability exists in Supervisor. It allows a remote user to execute arbitrary...

Supervisor Authenticated Remote Code Execution(CVE-2017-11610)

Vulnerability Summary The following advisory describes an authenticated remote code execution vulnerability in Supervisor version 3.1.2 and Supervisor version 3.3.2. Supervisor is a client/server system that allows its users to monitor and control a number of processes on UNIX-like operating...

Remote Code Execution (RCE)

Supervisor is vulnerable to remote code execution RCE attacks. A malicious user can send a malicious XMLRPC request to the application to inject and execute arbitrary commands at daemon level privilege...

Supervisor XML-RPC Authenticated Remote Code Execution

This module exploits a vulnerability in the Supervisor process control software, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Depending on how...

UBUNTU-CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

Remote Code Execution (RCE)

m2m-supervisor is vulnerable to remote code execution RCE. A malicious user can inject and execute arbitrary code due to the lack of sanitization of user input before executing the eval function...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in Thailan...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the ZyXEL P660HN-T v2 router. This customized version has an authenticated command injection vulnerability in the remote log forwarding page. This can be exploited using the "supervisor" account that comes with a...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Android operating system’s supervisor is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted directory name specified in the parameter uid, which is related to the name of the WAR file...

The vulnerability of the Android operating system, which allows a hacker to gain unauthorized access to memory

The vulnerability of the Page Table subsystem configuration in the Android operating system arises due to errors in the authentication process. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to supervisor memory...

The vulnerability of the Android operating system, which allows a intruder to gain unauthorized access to the supervisor’s memory

The vulnerability of the Android operating system’s supervisor exists due to insufficient checking of input data. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to the supervisor’s memory using HLOS...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the ZyXEL P660HN-T v2 router. This customized version has an authenticated command injection vulnerability in the remote log forwarding page. This can be exploited using the "supervisor" account that comes with a...

CVE-2016-6442

A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.01...

CVE-2016-6442

CVE-2016-6442 affects Cisco Finesse Agent and Supervisor Desktop Software. The issue is a CSRF vulnerability due to insufficient CSRF protections, allowing an unauthenticated, remote attacker to cause the user’s browser to submit arbitrary requests with the user’s privileges. Affected release not...

CVE-2016-6442: Cross-Site Request Forgery (CSRF)

A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.01...

Design/Logic Flaw

Cisco IOS 12.233SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restrictions by sending packets that should have been recognized by a filter, aka Bu...