IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-05097)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 throu...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-05098)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 throu...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-05099)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 throu...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-05101)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 throu...

Microsoft Malicious Software Removal Tool DLL Loading Local Privilege Escalation Vulnerability

Description Microsoft Malicious Software Removal Tool is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with SYSTEM privileges. Technologies Affected Microsoft Malicious Software Removal Tool 5.25 Recommendations Permit loca...

Western Digital Arkeia 11.0.13 Remote Code Execution

Advisory Information Title: Western Digital Arkeia "ARKFSEXECCMD" Date published: 2015-07-10 Vendors contacted: Western Digital / Arkeia Class: OS Command Injection CWE-78 Impact: Code execution Remotely Exploitable: Yes Product Description The WD Arkeia network backup suite comprises WD Arkeia...

Western Digital Arkeia Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Western Digital Arkeia Remote Code Execution', 'Description' = %q This module exploits a code execution flaw in Western Digital Arke...

Visual Mining NetCharts Server saveFile.jsp Page Directory Traversal (CVE-2015-4031)

An arbitrary file upload vulnerability has been reported in Visual Mining NetCharts Server. The vulnerability is due to lack of sanitization on a remotely supplied parameter within the saveFile.jsp page. A remote attacker can exploit this vulnerability to execute arbitrary code with SYSTEM...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code with system privileges.

The vulnerability of the Tivoli Storage Manager FastBack data management program is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with system privileges...

Windows Adobe Type Manager privilege escalation vulnerability

Overview The Adobe Type Manager module contains a memory corruption vulnerability, which can allow an attacker to obtain SYSTEM privileges on an affected Windows system. Description Adobe Type Manager, which is provided by atmfd.dll, is a kernel module that is provided by Windows and provides...

CVE-2015-1949

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

Design/Logic Flaw

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

CVE-2015-1949

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

The vulnerability of the Security SiteProtector System’s security protection mechanism allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the Security SiteProtector System security system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows an authenticated user, operating remotely, to execute arbitrary code with system privileges...

Symantec Endpoint Protection DLL Load Arbitrary Code Execution Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection loads DLLs with a security vulnerability that allows an attacker to construct a malicious DLL, place it on a network share or in a speci...

CVE-2015-0160

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

Design/Logic Flaw

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

Group Policy Script Execution From Shared Resource

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Group Policy Script Execution From Shared Resource', 'Description' = %q This is a general-purpose module for exploiting systems with...

Samsung Security Manager ActiveMQ Broker Service Remote Code Execution Vulnerability

Samsung Security Manager SSM is the central management platform for a set of recording devices. A remote code execution vulnerability in the ActiveMQ Broker service of SSM allows remote attackers to create arbitrary files on the server and execute arbitrary code with SYSTEM user privileges by...

EMC AutoStart is vulnerable to remote code execution via specially crafted packets

Overview EMC AutoStart, version 5.5.0 and earlier, is vulnerable to remote command execution via specially crafted packets. Description EMC AutoStart is an enterprise software application developed to help networks and service maintain a high level of availability. AutoStart can manage clusters o...