Code injection

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...

PT-2014-4010

Name of the Vulnerable Software and Affected Versions SoapUI versions prior to 4.6.4 Description The issue concerns the WSDL/WADL import functionality, which allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. Recommendations For versions prior t...

Android OS vulnerable to arbitrary Java method execution

Overview Android OS contains a vulnerability where an arbitrary Java method may be executed. Tamami Eguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When viewing a specially crafted page using the...

JVN#53768697: Android OS vulnerable to arbitrary Java method execution

Android OS contains a vulnerability where an arbitrary Java method may be executed. Impact When viewing a specially crafted page using the standard Android browser or an other application that uses the WebView class, Android OS may be rebooted or arbitrary code may be executed without intent from...

CVE-2013-4271: Deserialization of Untrusted Data

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221...

PT-2013-1363

Name of the Vulnerable Software and Affected Versions McAfee Web Reporter Premium affected versions not specified Description The issue exists due to insufficient access restrictions to the invoker/EJBInvokerServlet and invoker/JMXInvokerServlet servlets. This allows a remote attacker to execute...

CVE-2013-2035

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

CVE-2013-2035

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

CVE-2013-2035: Improper Control of Generation of Code

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

PT-2013-3515

Name of the Vulnerable Software and Affected Versions HawtJNI versions prior to 1.8 Description A race condition exists in the HawtJNI library, specifically in the Library.java file. This issue allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictabl...

Apache Struts2 'URL' & 'Anchor' tags Arbitrary Java Method Execution Vulnerabilities

This host is running Apache Struts2 and is prone to arbitrary java method execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbapachestruts2javamethodexecvuln.nasl 8373 2018-01-11 10:29:41Z cfischer $ Apache Struts2 'URL' & 'Anchor' tags Arbitrary Java Method Execution Vulnerabilities...

Design/Logic Flaw

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression...

JVN#63428218: Cybozu Live for Android vulnerable to arbitrary Java method execution

Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Note that this vulnerability is a regression in version 2.0.0 of the issue in JVN23009798. Impact When opening a specially crafted website, an attacker...

PT-2013-4539

Name of the Vulnerable Software and Affected Versions Cybozu Live versions prior to 2.0.1 Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or execute arbitrary commands via a crafted web site. This is due to a regression of a...

PT-2012-5138

Name of the Vulnerable Software and Affected Versions Cybozu KUNAI version prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or execute arbitrary commands via a crafted web site. Recommendations For versions prior to...

Cybozu Live for Android vulnerable to arbitrary Java method execution

Overview Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc...

PT-2012-5135

Name of the Vulnerable Software and Affected Versions Cybozu Live application versions 1.0.4 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted web site, potentially obtaining sensitive information or executing arbitrary commands...

PT-2012-4161

Name of the Vulnerable Software and Affected Versions Sleipnir Mobile application versions 2.2.0 and earlier Sleipnir Mobile Black Edition application versions 2.2.0 and earlier Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or...

Openfire Admin Console Authentication Bypass

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

PT-2012-3571

Name of the Vulnerable Software and Affected Versions dotCMS versions 1.9 through 1.9.5.1 Description The issue allows remote authenticated users to execute arbitrary Java code via crafted templates, specifically 1 XSLT or 2 Velocity templates. Recommendations For dotCMS versions 1.9 through...