Security Bulletin: OS Command Injection vulnerability affects IBM Security Guardium (CVE-2017-1253 )

Summary IBM Security Guardium could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1253 DESCRIPTION: IBM Security Guardium could allow a remote authenticated attacker to...

Security Bulletin: Privilege escalation vulnerability affects IBM Security Guardium (CVE-2017-1122)

Summary IBM Security Guardium contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM Security Guardium has addressed this issue Vulnerability Details CVEID: CVE-2017-1122 DESCRIPTION: IBM Security Guardium...

DameWare v10.0远程代码执行漏洞

No description provided by source...

EMC Cloud Tiering Appliance 10.0 XXE Injection

EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

EMC CTA v10.0 Unauthenticated XXE Arbitrary File Read

EMC CTA v10.0 is susceptible to an unauthenticated XXE attack that allows an attacker to read arbitrary files from the file system with the permissions of the root user. Module Options msf use auxiliary/gather/emc/ctaxxe msf undefinedctaxxe show actions ...actions... msf undefinedctaxxe set ACTIO...

Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking (mfc80esn.dll)

Exploit for windows platform in category local exploits / ============================================================================ Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking Exploit mfc80esn.dll ============================================================================= $ Progra...

[Full-disclosure] IBM Informix Dynamic Server V10.0 File Clobbering during Install

IBM Informix IDS V10.0 File Clobbering during Install 10/1/2006 Overview From the Website http://www-306.ibm.com/software/data/informix/ids/ "IBM Informixr Dynamic Server IDS is a strategic data server in the IBM Information Management Software portfolio that provides blazing online transaction...