Microsoft Office - OLE Remote Code Execution

Microsoft Office - OLE Remote Code Execution Source: https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882 Research:...

Apache Tomcat Upload Bypass / Remote Code Execution(CVE-2017-12617)

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

Nextcloud: Access to all files of remote user through shared file

Steps to reproduce 1. User A shares a file "movie.mp4" with user B. 2. User B uses webdav to access files e.g. foldersync or nautilus 3. share is shown as regular file using webdav. 4. Copy the file and paste it to the same folder still using webdav. 5. A new folder will appear with the name...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. Clicking on a LNK or file has essentially the same outcome as clicking on the file that is...

Nextcloud: WebDAV Empty Property search leads to full CPU usage

Tested with the following versions: - owncloud:10.0 - nextcloud:12.0 with mariadb in place. A PROFIND nextcloud/remote.php/webdav/ with xml as body causes full CPU utilization of one Apache worker process. in curl form: curl -i --user testuser:testpass -X PROPFIND -d ''...

CVE-2016-6312

The moddontdothat component of the moddavsvn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service memory...

CVE-2016-6312

CVE-2016-6312 is a regression of CVE-2009-1955 describing a DoS in Apache httpd/mod_dav_svn caused by the mod_dontdothat component failing to detect recursive XML entity expansion. Connected sources confirm the underlying issue is in APR-util's XML entity handling (as part of APR-util) used by Ap...

PT-2017-8960 · Apache +1 · Subversion +3

Name of the Vulnerable Software and Affected Versions: Subversion as packaged in Red Hat Enterprise Linux 5.11 Description: The issue allows remote authenticated users with access to the webdav repository to cause a denial of service, resulting in memory consumption and httpd crash, due to improp...

Information Disclosure

Moodle is vulnerable to information disclosure. In the repository/webdav/lib.php form, a plain text textbox is used for the WebDAV password, allowing a malicious administrator to obtain this information through configuring an instance...

Privilege Escalation

Moodle is vulnerable to privilege escalation attacks. The attacks are possible because it does not properly handle WebDav repository privileges. Therefore, any authenticated users are able to modify, read, or delete arbitrary site-wide repositories...

VulnCheck KEV: CVE-2003-0109

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0...

Microsoft Windows 'WebDAV' Remote Code Execution Vulnerability (KB3197835)

This host is missing a critical security update according to Microsoft KB3197835. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Security Advisory 4025685: Guidance for older platforms (XP / 2003) (EXPLODINGCAN)

The remote Windows host is missing a security update. It is, therefore, affected by one or more of the following vulnerabilities : - A remote code execution vulnerability exists in how the Remote Desktop Protocol RDP handles requests if the RDP server has Smart Card authentication enabled. An...

Xxe

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

CVE-2015-7326

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

CVE-2015-7326

CVE-2015-7326 denotes an XML External Entity (XXE) vulnerability in Milton Webdav. Affected in Milton Webdav before 2.7.0.3, with concrete evidence in connected documents showing XXE injection paths via XML parsing in PROPFIND/PROPPATCH/LOCK handling where SAXParser configuration was insecure. Th...

CVE-2015-7326

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

Microsoft IIS WebDav ScStoragePathFromUrl Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow', 'Description' = %q Buffer overflow in the ScStoragePathFromUrl function in the WebDAV servic...

Microsoft IIS WebDav ScStoragePathFromUrl Overflow Exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow',...

Microsoft IIS - WebDav 'ScStoragePathFromUrl' Remote Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow', 'Description' = %q Buffer overflow in the ScStoragePathFromUrl function in the WebDAV servic...