Multiple Cloud Foundry Foundation Product Command Injection Vulnerabilities

Pivotal Cloud Foundry is an open source platform-as-a-service cloud computing platform.Pivotal Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. A security vulnerability exists in Pivotal Cloud Foundry and cf-mysql that allows remote attackers to submit a special request to...

Pivotal Cloud Foundry MariaDB audit_plugin component information disclosure vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, Inc. in the United States. cf-mysql-release is one of the releases. mariaDB auditplugin is one of the plugins that allows operators to enable audit trails and logging sent to SQL...

CVE-2016-6653

Summary of CVE-2016-6653 (MariaDB audit_plugin in CF cf-mysql-release 27/28) The MariaDB audit_plugin integrated into PCF cf-mysql-release versions 27 and 28 can emit audit logs to syslog. A bug causes those logs to include sensitive information, potentially exposing application data and cleartex...

CVE-2016-0713: Gorouter XSS | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Description A vulnerability has been discovered in the gorouter process that allows a cross-site-scripting XSS attack. Should a malicious actor intermediate requests from clients to the router, modifying the request to contain malicious code, this...

多款Huawei路由器信息泄露漏洞

Summary The CF cards on some Huawei switches and ARs contain some sensitive information in plaintext. Once an attacker gets such a CF card, it may result in the leak of sensitive information HWPSIRT-2015-07048. This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...

CF Image Host 1.6.6 Cross Site Scripting Vulnerability

CF Image Host version 1.6.6 suffers from multiple cross site scripting vulnerabilities. CF Image Host 1.6.6 Cross Site Scripting Vulnerability Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6.6...

CF Image Host 1.6.6 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CFIMAGEHOST-XSS.txt Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6.6 Archive...

CF Image Host 1.65 - Cross-Site Request Forgery

input type="text"...

CF Image Host 1.65 - Cross-Site Request Forgery

CF Image Host 1.65 - Cross-Site Request Forgery input type="text" name="changesett...

CF Image Host 1.65 - PHP Command Injection

CF Image Host 1.65 - PHP Command Injection + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CFIMAGEHOST-PHP-CMD-INJECTION.txt Vendor: ==================================== codefuture.co.uk/projects/imagehost Product:...

CF Image Host 1.6.6 Command Injection Vulnerability

CF Image Host version 1.6.6 suffers from a remote command injection vulnerability. CF Image Host 1.6.6 Command Injection Vulnerability Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6.6 Archive...

CF Image Host 1.6.6 Cross Site Request Forgery Vulnerability

CF Image Host version 1.6.6 suffers from a cross site request forgery vulnerability. CF Image Host 1.6.6 Cross Site Request Forgery Vulnerability Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6....

CF Image Host 1.6.6 Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CFIMAGEHOST-CSRF.txt Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6.6 Archive...

USN-2739-1 FreeType Vulnerabilities | Cloud Foundry

USN-2739-1 FreeType Vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected libfreetype6 2.5.2-1ubuntu2.5 – FreeType 2 is a font engine library Description It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially...

Security Advisory - CF Card Information Leak Vulnerability on Multiple Huawei Products

The CF cards on some Huawei switches and ARs contain some sensitive information in plaintext. Once an attacker gets such a CF card, it may result in the leak of sensitive information HWPSIRT-2015-07048. Currently, official fixes are available...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CF Image Hosting Script 1.1 'upload.php' Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run ...

CF Image Hosting Script 1.3 (settings.cdb) Information Disclosure Vulnerability

No description provided by source. Title: CF Image Hosting script 1.3 settings.cdb Information Disclosure Vulnerability By: Dr.$audi Home: sa-virus.com Email: [email protected] Date: aug 29th 2010 Greez to: all sa-virus and v4-team members . Script: CF Image Hosting script v 1.3 HomePage:...

CF Image Host 1.1 - Remote File Inclusion Vulnerability

No description provided by source. Download: http://codefuture.co.uk/counter/?id=22 Title : CF Image Host Remote File Inclusion Vulnerability Author: The.Morpheus Contact: - Thanks: Herkese : Greetz: Megaturks.Net | Spyturks.Com demo :http://codefuture.co.uk/projects/imagehost1.1/demo/...

cf shopkart 5.2.2 (sql/dd) Multiple Vulnerabilities

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CF SHOPKART V5.2.2 download : http://www.cfshopkart.com/dl/cfshopkart522.rar Demo :...