CVE-2018-0493

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

CVE-2018-0493

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

UBUNTU-CVE-2018-0493

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

CVE-2018-0493

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

CVE-2018-0493

CVE-2018-0493 affects remctl’s server component, specifically remctld, up to version before 3.14. A use-after-free condition occurs when an attacker who is authorized to run a command that uses the sudo option can cause a daemon crash, memory corruption, or arbitrary command execution. Public det...

CVE-2018-0493

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

remctl memory misreference vulnerability

remctl is a client/server application that supports remote execution of specific commands. A memory misreference vulnerability exists in remctld in remctl prior to 3.14 when an attacker is authorized to execute commands with the sudo option. An attacker could use this vulnerability to cause a...

CVE-2018-0493: Use After Free

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution...

PT-2018-8858

Name of the Vulnerable Software and Affected Versions remctl versions prior to 3.14 Description The issue is related to a use-after-free error in remctld, which can occur when an attacker is authorized to execute a command that uses the sudo option. This error can lead to a daemon crash, memory...

Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code Execution', 'Description' = %q This module exploits a Remote...

CVE-2018-0539

QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors...

CVE-2018-0539

The CVE-2018-0539 entry concerns QQQ SYSTEMS version 2.24, a Perl CGI-based quiz tool, which contains an OS command injection vulnerability (CWE-78). Connected sources confirm that an attacker can execute arbitrary commands on the server with the web server’s privileges, due to the vulnerable com...

CVE-2018-0539: Improper Neutralization of Special Elements used in an OS Command

QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors...

PT-2018-8898

Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description The issue allows an attacker to execute arbitrary commands via unspecified vectors. Recommendations For QQQ SYSTEMS version 2.24, at the moment, there is no information about a newer version that contains a...

PT-2018-17480

Name of the Vulnerable Software and Affected Versions Unitrends Backup versions prior to 10.1.0 Description A security issue was found where the authentication in libbpext.so could be bypassed using a SQL injection, allowing a remote attacker to potentially place a privilege escalation exploit on...

CentOS 7 : ruby (CESA-2018:0378)

An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Cisco ASR 5000 Series Aggregation Services Routers StarOS OS CLI Command Injection Vulnerability

Cisco ASR 5000 Series Aggregation Services Routers is a 5000 series security router appliance from Cisco. the StarOS operating system is a set of virtualized operating systems that run on it. the CLI is a command-line interface. A command injection vulnerability exists in the CLI of the StarOS...

CVE-2018-0521

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0521

The CVE-2018-0521 issue affects Buffalo WXR-1900DHP2 firmware versions 2.48 and earlier. The vulnerability is a Missing Authentication for Critical Function (CWE-306) that allows an attacker on the connected network to bypass authentication and execute arbitrary commands on the device via unspeci...

PT-2018-8880

Name of the Vulnerable Software and Affected Versions Buffalo WXR-1900DHP2 firmware versions prior to 2.49 Description The issue allows an attacker to bypass authentication and execute arbitrary commands on the device. Recommendations For Buffalo WXR-1900DHP2 firmware versions prior to 2.49, upda...