CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

DEBIAN-CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

Integer overflow

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

PT-2017-18020

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P11 NetApp Clustered Data ONTAP version 9.0 before P4 NetApp Clustered Data ONTAP version 9.1 before P5 Description The issue allows attackers to obtain sensitive password information. This is...

CVE-2017-1000363: Out-of-bounds Write

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

CVE-2017-7947: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

Fedora 26 : php-pear-PHP-CodeSniffer (2017-b85d51cc47)

Version 3.0.1 - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrade to...

Juniper Junos Administrator Privilege Acquisition Vulnerability (CNVD-2017-21782)

Juniper Junos is a network operating system dedicated to the company's hardware systems. An administrator privilege acquisition vulnerability exists in the Juniper Junos command line window, which could be exploited by a local attacker to gain administrator privileges...

PyCharm 2-0 / 2017 Buffer Overflow Exploit

Exploit for windows platform in category dos / poc PyCharm 2-0 / 2017 Command Line Buffer Overflow Author: Sultan albalawi video:https://www.facebook.com/pentest3/videos/vb.100012552940568/291228291305600/?type=2&theater C:\Program Files x86\JetBrains\PyCharm Edu 2.0.2\bin or C:/Program...

Cisco IOS CLI Command Execution

The vulnerability of the Cisco IOS operating system’s CLI component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands with root privileges...

Cisco IOS Privilege Escalation

The vulnerability of the CLI component of the Cisco IOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating locally, to elevate their privileges to the level of the root user...

CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

CVE-2017-6726

A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve system process information, which could lead to the disclosure of confidential information. More Information: CSCvd59341. Known Affected Releases: 4.21.0P1...

Magic Wormhole - Get Things From One Computer To Another, Safely

This package provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories or short pieces of text from one computer to another. The two endpoints are identified by using identical "wormhole codes": in general, the sending machine...

CVE-2017-6718

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT...

Exploit for CVE-2017-0213

CV...

Obfuscation in the Wild: Targeted Attackers Lead the Way in Evasion Techniques

Throughout 2017 we have observed a marked increase in the use of command line evasion and obfuscation by a range of targeted attackers. Cyber espionage groups and financial threat actors continue to adopt the latest cutting-edge application whitelisting bypass techniques and introduce innovative...