Cisco TelePresence Collaboration Endpoint CLI Arbitrary File Write

The vulnerability of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software is related to improper handling of permissions. Exploiting this vulnerability could allow an attacker to write arbitrary files into the root directory...

Apache Tomcat Code Execution

The vulnerability of the Apache Tomcat application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, as a result of the default enabled parameter “enableCmdLineArguments” of the CGI server...

Cisco Wireless LAN Controller CLI Unauthorized Access

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

[SECURITY] Fedora 31 Update: ImageMagick-6.9.10.75-1.fc31

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 31 Update: xen-4.12.1-7.fc31

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2019-15997

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI...

CVE-2019-15986

A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this vulnerability, an attacker would need valid administrator credentials. The vulnerability is due to improper input...

PT-2019-5284

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...

[SECURITY] Fedora 29 Update: koji-1.19.1-1.fc29

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

DNCI - Dot Net Code Injector

DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command line utility for injection;...

POC-T

This is a Python-based penetration testing framework called POC-T. It is a concurrent framework that allows users to perform various types of attacks, including vulnerability verification, file upload, weak password cracking, and more. The framework has a modular design, with each module...

tcpdump Input Validation Error Vulnerability

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capturing etc. An input validation error vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to...

Unspecified Vulnerability in Fortinet FortiOS (CNVD-2019-42441)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

Cisco TelePresence Collaboration Endpoint CLI Code Execution

The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code with root privileges by sending...

Cisco TelePresence Collaboration Endpoint CLI Data Compromise

The multiple vulnerabilities of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software exist due to insufficient validation of input data. Exploitation of these vulnerabilities could allow attackers to compromise the integrity of protected...

[SECURITY] Fedora 29 Update: xen-4.11.2-2.fc29

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

SUSE-SU-2019:14215-1 Security update for tar

This update for tar to version 1.27.1 fixes the following issues: tar 1.27.1 brings following changes jscECO-339 Sparse files with large data No backticks in quoting --owner and --group names and numbers Support for POSIX ACLs, extended attributes and SELinux context. Passing command line argumen...

Information Disclosure

Libosinfo is vulnerable to information disclosure. It is due to the osinfo-install-script option which leaks password via command line argument...

virt-install: unattended option leaks password via command line argument

The virt-install utility used to provision new virtual machines, in virt-manager v2.2.0, has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments. An attacker could obtain these passwords though process listing...

Moderate: Red Hat Security Advisory: yum security, bug fix, and enhancement update

An update for yum is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...