CVE-2023-29385

The CVE-2023-29385 entry describes an unauthenticated, reflected XSS vulnerability in the WP Abstracts plugin for WordPress (Kevon Adonis WP Abstracts) affecting versions up to and including 2.6.2. The root cause is insufficient sanitization/escaping of input, enabling a reflected XSS when user-c...

adonis-abbey.com Cross Site Scripting vulnerability OBB-3364490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in @alice-bob/com.alice.adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90cad1ecdb82a3b682d758bf5ac96c012458d22c4632d480caff86f1790a207a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BlueCat Networks Adonis 5.0.2 .8 TFTP Remote Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25214/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability. This issue occurs when Proteus appliances are used to upload files to an affected Adonis appliance for TFTP download. An...

BlueCat Networks Adonis 5.0.2 .8 CLI Remote Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25342/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input. An attacker with administrative privileges can explo...

RealPlayer 11 - .au Denial of Service

RealPlayer 11 - .au Denial of Service RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

RealPlayer 11 - '.au' Denial of Service

RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

BlueCat Networks Adonis CLI远程权限提升漏洞

BUGTRAQ ID: 25342 Adonis是企业级的硬件DNS/DHCP管理设备。 Adonis设备对命令行请求的处理上存在漏洞，本地攻击者可能利用此漏洞控制设备。 如果在Adonis设备的管理员帐号所提供的CLI输入某个命令序列的话，就可能允许管理员以root用户权限执行命令。 Bluecat Networks Adonis 5.0.2.8 临时解决方法： 仅为可root访问设备的管理员提供管理员帐号。 厂商补丁： Bluecat Networks ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Command injection

The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...

CVE-2007-4390

The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...

CVE-2007-4390

The Command Line Interface CLI, aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command...

CVE-2007-4390

The CVE-2007-4390 issue affects BlueCat Networks Adonis DNS/DHCP appliance (CLI/Adonis Administration Console) version 5.0.2.8. The vulnerability allows local admin users to gain root privileges on the underlying OS by injecting shell metacharacters in a command. Documents confirm the affected co...

Adonis privilege escalation

By using shell characters problem administrator can access device with root privileges...

TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...

TS-2007-003-0.txt

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...

BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation

BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation source: https://www.securityfocus.com/bid/25342/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input. An attacker with...

BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation

source: https://www.securityfocus.com/bid/25342/info BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input. An attacker with administrative privileges can exploit this issue to execute arbitrary...

CVE-2007-4205

XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...

Denial of service

XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...

CVE-2007-4205

CVE-2007-4205 affects XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8. The issue allows a remote attacker to trigger a denial-of-service by sending a UDP packet to port 694, crashing the heartbeat control process. The description notes this may be the same vulnerability a...