EUVD-2018-12788

Malware in sbrugna...

CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application...

CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application...

CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application...

CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application...

CVE-2018-20221

CVE-2018-20221 affects Deltek Ajera Timesheets <= 9.10.16. The issue is a deserialization vulnerability that allows remote code execution when untrusted data is deserialized from an authenticated user, with the executed code running in the IIS Application Pool hosting the application. Public e...

Deltek Ajera Timesheets Code Execution Vulnerability

Deltek Ajera Timesheets is a suite of ERP Enterprise Resource Planning solutions from Deltek USA. The product includes features such as project management, financial management and business intelligence. A security vulnerability exists in the Secure/SAService.rem file in Deltek Ajera Timesheets...

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data Exploit

Exploit for windows platform in category web applications Exploit Title: Ajera Timesheets = 9.10.16 - Deserialization of untrusted data Exploit Author: Anthony Cole Vendor Homepage: https://www.deltek.com/en/products/project-erp/ajera Version: = 9.10.16 Contact: http://twitter.com/acole76 Website...

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data Exploit Title: Ajera Timesheets = 9.10.16 - Deserialization of untrusted data Date: 2019-01-03 Exploit Author: Anthony Cole Vendor Homepage: https://www.deltek.com/en/products/project-erp/ajera Version: = 9.10.16 Contact:...

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data

Exploit Title: Ajera Timesheets = 9.10.16 - Deserialization of untrusted data Date: 2019-01-03 Exploit Author: Anthony Cole Vendor Homepage: https://www.deltek.com/en/products/project-erp/ajera Version: = 9.10.16 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on:...