cPanel Code Execution Vulnerability (CNVD-2019-26340)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execut...

CVE-2016-10837

cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path SEC-46...

Code execution vulnerability in 74cms backend Co***.cl***.php file

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Co.cl.php file there is a code execution vulnerability. Allow attacker...

Design/Logic Flaw

An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution Exploit (2

Exploit for jsp platform in category web applications Exploit Title: Authenticated insecure file upload and code execution flaw in Ahsay Backup v7.x - v8.1.1.50. Metasploit Date: 26-6-2019 Exploit Author: Wietse Boonstra Vendor Homepage: https://ahsay.com Software Link:...

Arbitrary File Deletion, Code Execution Vulnerabilities in ICMS

ICMS is a high content management system built with PHP and MySQL. ICMS suffers from an arbitrary file deletion, code execution vulnerability. An attacker can exploit this vulnerability to delete arbitrary files and gain control of the website...

Code Execution Vulnerability in OpenSNS V5

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A code execution vulnerability exists in OpenSNS, which can be exploited by an attacker to obtain server information...

JetBrains IntelliJ IDEA Ultimate Code Execution Vulnerability

JetBrains IntelliJ IDEA Ultimate is a Czech JetBrains integrated development environment for the Java language. A code execution vulnerability exists in JetBrains IntelliJ IDEA Ultimate. A remote attacker could exploit the vulnerability to execute code...

JetBrains IntelliJ IDEA Code Execution Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A code execution vulnerability exists in JetBrains IntelliJ IDEA. An attacker could exploit the vulnerability to execute code...

KLA11513 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...

strong_password Ruby gem malicious version causing Remote Code Execution vulnerability

The strongpassword gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Version 0.0.8 does not contain the backdoor...

Code Execution Vulnerability in EasyAdmin v1.0.8

EasyAdmin is a free and open source community program based on the LayUI template, with a ThinkPHP5 framework for backend support. EasyAdmin code execution vulnerability , an attacker can exploit the vulnerability to obtain server privileges...

openSUSE Security Update : vim (openSUSE-2019-1561)

This update for vim fixes the following issue : Security issue fixed : - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c bsc1137443. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and...

OPENSUSE-SU-2019:1551-1 Security update for neovim

This update for neovim fixes the following issues: Security issue fixed: - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c bsc1137443...

SUSE SLED12 / SLES12 Security Update : vim (SUSE-SU-2019:1456-1)

This update for vim fixes the following issue : Security issue fixed : CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c bsc1137443. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

CVE-2019-11952

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

Debian: Security Advisory (DLA-1808-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Use After Free in Microsoft

CVE-2019-0708 The Crashing Part BSOD has been removed intentio...

Command Execution Vulnerability in Doccms 2016

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. A code execution vulnerability...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Code execution vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to execute arbitrary code and obtain server information...