CVE-2015-0701

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

CVE-2015-0701

Cisco UCS Central Software versions prior to 1.3(1a) are affected by a command-execution vulnerability exposed via the web interface. The root cause is improper input validation in the web framework, allowing an unauthenticated, remote attacker to craft an HTTP request that executes arbitrary OS ...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

Cisco UCS Central Software is the United States of America Cisco Cisco, a combination of computing, virtualization and networking in one software platform. An arbitrary command execution vulnerability exists in Cisco UCS Central Software. The vulnerability allows an unauthenticated, remote attack...

ManageEngine Desktop Central MSP FileUploadServlet computerName File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileUploadServlet servlet. The issue lies in the failure to...

ManageEngine Desktop Central MSP IOSCheckInServlet UDID Remote Code Execution Vulnerability

Manageengine desktop central is a complete windows client management software that enables remote management of desktop and mobile computers with its remote software installation and configuration options. A remote code execution vulnerability exists in the ManageEngine Desktop Central MSP...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

A vulnerability in the web framework of Cisco UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

ManageEngine Desktop Central MSP IOSCheckInServlet UDID Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IOSCheckInServlet servlet. The issue lies in the failure to...

ManageEngine Desktop Central MSP MDMLogUploaderServlet filename File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MDMLogUploaderServlet servlet. The issue lies in the failure to...

Unspecified Vulnerability in Oracle Retail Applications Retail Central Office Component

Oracle Retail Applications is a suite of retail application store solutions. A security vulnerability exists in the Oracle Retail Central Office component of Oracle Retail Applications, which can be exploited by remote attackers to manipulate data and compromise system integrity...

Buffer overflow

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0494

CVE-2015-0494 concerns the Oracle Retail Central Office component of Oracle Retail Applications (versions 13.1–14.1). The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors; CVSS notes a network attack vector with partial integrity impact...

CVE-2015-0494

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

ManageEngine Desktop Central Login Utility

This module will attempt to authenticate to a ManageEngine Desktop Central. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/manageenginedesktopcentral' require...

ManageEngine Desktop Central MSP InventorySWMeteringServlet domain File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the InventorySWMeteringServlet servlet. The issue lies in the failure...

ManageEngine Desktop Central MSP AndroidCheckInServlet UDID Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AndroidCheckInServlet servlet. The issue lies in the failure to...

Palo Alto Traps Server 3.1.2.1546 - Persistent XSS Vulnerability

Exploit for windows platform in category web applications !/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version:...

ManageEngine Desktop Central < 9 Build 90135 Unauthenticated Admin Password Reset

The version of ManageEngine Desktop Central running on the remote host is prior to 9 build 90135. It is, therefore, affected by an authentication bypass vulnerability due to a flaw in the addOrModifyUser method in the 'DCOperationsServlet' servlet. An unauthenticated, remote attacker can exploit...

Manage Engine Desktop Central 9 Unauthorized Administrative Password Reset Vulnerability

A remote unauthenticated user can change the password of any Manage Engine Desktop Central user with the Administrator role DCAdmin. A vulnerability exists in the Manage Engine Desktop Central 9 application that affects version build 90130. This may affect earlier releases as well. The...

Manage Engine Desktop Central 9 Unauthorized Administrative Password Reset

A vulnerability exists in the Manage Engine Desktop Central 9 application that affects version build 90130. This may affect earlier releases as well. The vulnerability allows a remote unauthenticated user to change the password of any Manage Engine Desktop Central user with the ‘Administrator’ ro...

ManageEngine Desktop Central statusUpdate Arbitrary File Upload RCE (intrusive check)

The version of ManageEngine Desktop Central running on the remote host is affected by a remote code execution vulnerability due to a failure by the statusUpdate script to properly sanitize user-supplied input to the 'fileName' parameter when performing an 'LFU' action to statusUpdate. A remote,...