Attentive Home Attentive Cat (imcat) suffers from an XML entity injection vulnerability

imcat is a PHP-based open source website building system . Thoughtful Home Thoughtful Cat imcat has an XML entity injection vulnerability that can be exploited by an attacker to gain control of the server...

Arbitrary Code Execution Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Arbitrary code execution vulnerability exists in several versions of Intimate Home Care Intimate Cat imcat. An attacker can exploit the vulnerability to execute arbitrary code and gain server privileges...

File Upload Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. File upload vulnerability exists in several versions of Sticky Home Sticky Cat imcat. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. SQL injection vulnerability exists in several versions of imcat. An attacker can exploit this vulnerability to obtain sensitive database information...

Code Execution Vulnerability in Intimate Home Care Intimate Cat (imcat) (CNVD-2020-29218)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A code execution vulnerability exists in Intimate Home Care Intimate Cat imcat, which can be exploited by attackers to execute malicious code...

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat) (CNVD-2020-29221)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in Intimate Cat imcat, which can be exploited by an attacker to upload a malicious file and then getshell it...

Code Execution Vulnerability in Attentive Home Attentive Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A code execution vulnerability exists in Intimate Home Care Intimate Cat imcat, which can be exploited by attackers to execute malicious code...

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat) (CNVD-2020-29222)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2020:0576-1)

This update for compat-openssl098 fixes the following issues : Add missing commits for fixes of the 'The 9 Lives of Bleichenbacher's CAT' attack bsc1117951 Fixed missing BNcopy bsc1160163 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : openssl (SUSE-SU-2020:0516-1)

This update for openssl fixes the following issues : Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 Fix a memory leak problem in function 'BNcopy'. bsc1160163 Note that Tenable Network Security has extracted the preceding description block...

SUSE-SU-2020:0516-1 Security update for openssl

This update for openssl fixes the following issues: - Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 - Fix a memory leak problem in function 'BNcopy'. bsc1160163...

SUSE-SU-2020:14291-1 Security update for openssl1

This update for openssl1 fixes the following issues: - Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 - Fix a memory problem in 'BNcopy'. bsc1160163...

openSUSE: Security Advisory for openssl-1_0_0 (openSUSE-SU-2019:1432-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-6026

Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...

CVE-2019-6026

Privilege escalation vulnerability in Multiple MOTEX products LanScope Cat client program MR and LanScope Cat client program MRLanScope Cat detection agent DA prior to Ver.9.2.1.0, LanScope Cat server monitoring agent SA, SAE prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 LanScope An 2...

CVE-2019-6026

CVE-2019-6026 affects MOTEX LanScope Cat and LanScope An products. A privilege-escalation flaw exists in LanScope Cat client program (MR), LanScope Cat detection agent (DA), LanScope Cat server monitoring agent (SA/SAE) before specified versions, and LanScope An before specified versions (2.x and...

CVE-2019-5111

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...

Multiple MOTEX products vulnerable to privilege escalation

Overview LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Mitsuaki Mitch Shiraishi of Secureworks Japan and Yoshimasa Obana reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...