Command injection

IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges by leveraging admin access...

IBM QRadar Security Information and Event Manager Unspecified Command Injection Vulnerability

IBM QRadar Security Information and Event Manager SIEM is a U.S.-based IBM solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A command injection vulnerability exists in IBM QRadar SIEM version 7.2.x and 7.1 MR2 Patch 1...

Cisco Ironport Appliances Privilege Escalation Vulnerability

Cisco Ironport Appliances Privilege Escalation Vulnerability Vendor: Cisco Product webpage: http://www.cisco.com Affected versions: Cisco Ironport ESA - AsyncOS 8.5.5-280 Cisco Ironport WSA - AsyncOS 8.0.5-075 Cisco Ironport SMA - AsyncOS 8.3.6-0 Date: 22/05/2014 Credits: Glafkos Charalambous CVE...

The vulnerability of the microprogramming software of Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—allows a hacker to gain access to the device with administrator privileges.

The vulnerability of the microprogramming software in Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—is related to the presence of a pre-installed user with administrator privileges. Exploiting this vulnerability allows a malicious actor to gain...

Netsweeper 4.0.8 - SQL Injection Authentication Bypass

Netsweeper 4.0.8 - SQL Injection Authentication Bypass +----------------------------------------------------------------+ + Netsweeper 4.0.8 - SQL Injection Authentication Bypass Admin + +----------------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepag...

Netsweeper 4.0.8 - SQL Injection / Authentication Bypass

+----------------------------------------------------------------+ + Netsweeper 4.0.8 - SQL Injection Authentication Bypass Admin + +----------------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com/ Version : 4.0.8 and probably...

Mail.ru: [riot.mail.ru] Reflected XSS in debug-mode

Приветствую. Уязвимость существует за счёт отображения всех запросов к серверу в режиме отладки, доступными любому пользователю. Как следствие мы имеем 2 нехороших проблемы: 1 Full SQL Disclosure Run query: SELECT FROM forumconfig Run query: SELECT catid,name FROM forumcats ORDER BY orderid Run...

Multiple Storage-based Cross-site Scripting Vulnerabilities in Shenzhen Yifa Everlasting Yifa Cloud OA System

Yifa cloud OA office software integrates the most advanced management ideas, standardized management and value-added utilization of workflow, information flow and knowledge management to provide users with an advanced and efficient information work platform. The system is completely designed with...

foreman: edit_users permission allows changing of admin passwords

It was discovered that in Foreman the editusers permissions for example, granted to the Manager role allowed the user to edit admin user passwords. An attacker with the editusers permissions could use this flaw to access an admin user account, leading to an escalation of privileges...

Fedora 21 : php-horde-Horde-Auth-2.1.10-1.fc21 / php-horde-Horde-Core-2.20.6-1.fc21 / etc (2015-11287)

HordeForm 2.0.10 - jan SECURITY: Fixed XSS in form renderer. HordeIcalendar 2.1.1 - jan Fix generated VALARM TRIGGER attributes with empty duration Ralf Becker. HordeAuth 2.1.10 - jan SECURITY: Don't allow to login to LDAP with an emtpy password. HordeCore 2.20.6 - jan SECURITY: Don't allow to...

Shopify: Prevent Shop Admin From Seeing his Installed Apps / Install Persistent Unremovable App

Hi, This is an interesting vulnerability, when a Shopify app whose redirecturi points to a malformed URI handler like shit:google.com gets installed to a Shop then, it will effectively prevent the admins to see and remove installed apps to his/her shop. Reproduction 1. Create a Shopify App at...

CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

Vesta Control Panel 0.9.8 OS Command Injection

Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor Patch: June 3, 2015 Public Disclosure: June 17,...

CUPS Localized String Elevation of Privilege Vulnerability

CUPS is a universal Unix printing system , is a cross-platform printing solution for the Unix environment , based on the Internet Printing Protocol , to provide most of the PostScript and raster printer services. CUPS has a security vulnerability that allows remote users to send special localized...

The vulnerability of the Windows operating system, which allows a remote attacker to escalate their privileges

The Microsoft Windows operating system contains a vulnerability related to improper verification and application of impersonation levels. This allows attackers to bypass security checks and elevate their privileges, including gaining administrator account information. If exploited successfully,...

Juniper Junos SRX Series 'log-out-on-disconnect' Persistent Admin Access (JSA10672)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by an administrative access vulnerability due to a flaw in the 'log-out-on-disconnect' feature after a reboot. This can allow an attacker with physical access to the device to gain administrative...

Unspecified Vulnerability in Juniper Networks Junos on SRX Series

Juniper Networks Junos on SRX Series devices is a Juniper Networks network operating system that runs on SRX Series Services Gateway devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos in the SRX Series...

WordPress WP All Import Plugin <= 3.2.4 - Multiple Vulnerabilities

This plugin is prone to an SQL injection and cross site scripting vulnerabilities. Because of them, attackers can gain admin access to your website or trick you into visiting the malicious URL. Solution Update the plugin...

Fraction Theme < 1.1.2 - Privilege Escalation

This vulnerability allows an attacker either authenticated or unauthenticated to escalate privileges on the site and have an admin account which may lead to a full site takeover. PoC This will enable user registration: https://example.com/wp-admin/admin-ajax.php?action=otsaveoptionscanregister=1...

Discuz全版本存储型DOM XSS（可打管理员）附Discuz官方开发4大坑&amp;验证脚本

简要描述： 由此次漏洞和上次的命令注入，看出Discuz官方开发4大坑： 1.发的补丁和diff官方最新版本安装包的结果不一定相同（导致后台升级，手动更新后已经在新版本修了的漏洞还在） 2.发补丁不发修复点的公告（导致二次开发的站考虑到兼容性不愿第一时间更新） 3.在线上改代码修漏洞却不发补丁 4.发补丁，发新版本安装包的时间，论坛发补丁帖的时间不一致，参见：http://download.comsenz.com/DiscuzX/3.2/ http://www.discuz.net/forum-10-1.html 详细说明： Discuz编辑器JS处理不当导致的存储型XSS。 产生原因：...