EUVD-2008-4294

Malware in sbrugna...

EUVD-2005-4345

Malware in sbrugna...

EUVD-2012-0164

Malware in sbrugna...

EUVD-2007-3086

Malware in sbrugna...

EUVD-2023-41267

Malicious code in bioql PyPI...

CVE-2012-10030: Unrestricted Upload of File with Dangerous Type

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364: Improper Restriction of XML External Entity Reference

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

WS J WBEM Server Code Issue Vulnerability

WS J WBEM Server is an open source server software from WS. A security vulnerability in WS-Inc J WBEM Server version 4.x prior to 4.7.5 stems from a CIM-XML protocol adapter that does not disable entity parsing, allowing context-sensitive attackers to read arbitrary files or cause a denial of...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

PT-2023-25933

Name of the Vulnerable Software and Affected Versions WS-Inc J WBEM Server version 4.7.4 Description The CIM-XML protocol adapter in the affected version does not disable entity resolution, allowing context-dependent attackers to read arbitrary files or cause a denial of service. Recommendations...

CVE-2023-37364

CVE-2023-37364 affects WS-Inc J WBEM Server, versions before 4.7.5. The CIM-XML protocol adapter fails to disable entity resolution, enabling context-dependent attackers to read arbitrary files or trigger a denial of service. This aligns with the issue described in the initial CVE entry and is co...

Access Control Bypass

tog-pegasus is vulnerable to access control bypass. After re-basing to version 2.7.0 of the OpenGroup Pegasus code, these additional security enhancements were no longer being applied. As a consequence, access to OpenPegasus WBEM services was not restricted to the dedicated users as described in...

Hash Collision Attack

The SBLIM CIM Client is susceptible to hash collision attack. Since it uses HashMap to parse XML inputs, it allows the attacker to predict hashes and input malicious CIM-XML message from a WBEM Web-Based Enterprise Management server, causing high CPU consumption...

CVE-2012-10030

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/freefloatftpwbem.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:36+00:00| seen|...

PT-2017-19385

Name of the Vulnerable Software and Affected Versions sblim-sfcb affected versions not specified Description The issue concerns the addition of a separate package, sblim-sfcb-openssl1, to the SECURITY Module, which offers TLS 1.2 support on the WBEM SSL socket. Bugfixes include adding sslNoSSLv3...

Low: Red Hat Security Advisory: sblim-cim-client2 security update

Updated sblim-cim-client2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

[security bulletin] HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03221589 Version: 1 HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data NOTICE: The information in this Security Bulletin should be acted upon as soon as...