191 matches found
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
Design/Logic Flaw
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
CVE-2019-3556
The CVE-2019-3556 issue affects HHVM where the admin server’s dump-pcre-cache handler accepts an unvalidated filesystem path parameter, enabling a malicious user to overwrite arbitrary files with the privileges of the HHVM user. This can write to arbitrary locations and is tied to HHVM versions: ...
CVE-2019-3556: Improper Limitation of a Pathname to a Restricted Directory
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +9230 more potentially affected by CVE-2021-39154 via com.thoughtworks.xstream:xstream (>=1.1.1, <=1.4.17)
com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =1.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =j8.2.2.0, =finchley.sr4, =greenwich.sr2.1 - am.ik.eureka:simple-eureka-client 0.1.0 and more Source cves: CVE-2021-39154 Source advisory:...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +8771 more potentially affected by CVE-2021-21347 via com.thoughtworks.xstream:xstream (>=1.1.1, <=1.4.15)
com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =1.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =j8.2.2.0, =finchley.sr4, =greenwich.sr2.1 - am.ik.eureka:simple-eureka-client 0.1.0 and more Source cves: CVE-2021-21347 Source advisory:...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +8611 more potentially affected by CVE-2020-26259 via com.thoughtworks.xstream:xstream (>=1.1.1, <=1.4.14-jdk7)
com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =1.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =j8.2.2.0, =finchley.sr4, =greenwich.sr2.1 - am.ik.eureka:simple-eureka-client 0.1.0 and more Source cves: CVE-2020-26259 Source advisory:...
Ubuntu 18.04 LTS : Debian-LAN vulnerabilities (USN-4530-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4530-1 advisory. Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs for the Kerberos admin server. A local attacker could possibly use this issue to change t...
USN-4530-1: Debian-LAN vulnerabilities
Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs for the Kerberos admin server. A local attacker could possibly use this issue to change the passwords of other users, leading to root privilege escalation. CVE-2019-3467...
IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution Exploit (2)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule "IBM TM1 / Planning Analytics Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a vulnerability in...
IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule "IBM TM1 / Planning Analytics Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a vulnerability in...
IBM Cognos TM1 / IBM Planning Analytics Server Configuration Overwrite / Code Execution Exploit
IBM Cognos TM1 Server / Planning Analytics Server TM1 suffers from a configuration overwrite vulnerability that can be leveraged to achieve code execution as SYSTEM via TM1 scripting. Extensive research is included in this advisory as well as the Metasploit module. IBM PA / TM1, dating back to...
[SECURITY] [DSA 4595-1] debian-lan-config security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4595-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 27, 2019 https://www.debian.org/security/faq -...
Default credentials
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
CVE-2019-3467: Incorrect Permission Assignment for Critical Resource
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
IBM TM1 / Planning Analytics Unauthenticated Remote Code Execution
This module exploits a vulnerability in IBM TM1 / Planning Analytics that allows an unauthenticated attacker to perform a configuration overwrite. It starts by querying the Admin server for the available applications, picks one, and then exploits it. You can also provide an application name to...
PT-2019-5234 · Mit +2 · Kerberos +3
Name of the Vulnerable Software and Affected Versions: Debian-edu-config versions prior to 2.11.10 debian-lan-config versions prior to 0.26 Description: The issue is related to a security flaw in privilege management. Exploitation of this flaw can allow an attacker to gain unauthorized access to...
50m-ctf: LFI on Accounting server and RCE on FliteThermostat admin server
Summary: An attacker is able to download local files on the Accounting server due leveraging improper input sanitization in the Invoice PDF generator. In the same fashion an attacker is also able to issue server-side requests on the Accounting server through user-controlled CSS, possibly leading ...