9283 matches found
CVE-2017-9279
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...
CVE-2017-9279
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...
Design/Logic Flaw
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...
CVE-2017-9279
CVE-2017-9279 affects NetIQ Identity Manager prior to 4.5.6.1. In the Themes handling of the User Application Administration, it allows uploading files with double extensions or non-image content, enabling a malicious administrator to potentially execute code or mislead users. Root cause: insuffi...
PT-2018-8501
Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.5.6.1 Description The issue allows malicious user administrators to upload files with double extensions or non-image content in the Themes handling of the User Application Administration. This could...
CVE-2017-9279: Unrestricted Upload of File with Dangerous Type
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...
[SECURITY] Fedora 26 Update: phpMyAdmin-4.7.8-1.fc26
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
[SECURITY] Fedora 27 Update: phpMyAdmin-4.7.8-1.fc27
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
Sql injection
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
CVE-2018-6883
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
CVE-2018-6883
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
CVE-2018-6883: Improper Neutralization of Special Elements used in an SQL Command
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
Supporters of Net Neutrality Vow to Fight Rule Changes
The repeal of network neutrality rules inched closer to reality on Thursday when the Federal Communications Commission submitted into the Federal Registry its controversial replacement called the Restoring Internet Freedom order. Opponents say the new order will create powerful internet gatekeepe...
Adobe Flash Player Use After Free Remote Code Execution Vulnerability(CVE-2018-4878)
EXECUTIVE SUMMARY The 1st of February, Adobe published an advisory concerning a Flash vulnerability CVE-2018-4878. This vulnerability is a use after free that allows Remote Code Execute through a malformed Flash object. Additionally KISA Korean CERT published an advisory about a Flash 0-day used ...
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2018-05344)
Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting...
Parat - Python Based Remote Administration Tool (RAT)
Parat is a simple remote administration tool RAT written in python. Also you can read wiki! Change log: Compatible with both python 2 and 3 versionsdont forget that may causes some error.so please share us any errors Do you want to try? Copy and paste on your terminal: git clone...
EvilOSX
EvilOSX An evil RAT Remote Administration Tool for macOS...
Dell EMC Isilon OneFS XSS / Code Execution / CSRF
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Dell EMC Isilon OneFS Multiple Vulnerabilities 1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:...
Multiple Vulnerabilities in West Wind Web Server
West Wind Web Server is a web application server software. A security vulnerability exists in version 6.x of West Wind Web Server that originates from the program failing to perform authentication of users accessing the /ADMIN.ASP web page. An attacker could exploit this vulnerability to execute...