Emissary 跨站请求伪造漏洞

Emissary is a software application. A P2P-based data-driven workflow engine that operates across heterogeneous and potentially widely distributed multi-tier P2P network computing resources. U.S. National Security Agency NSA Emissary 5.9.0 suffers from a cross-site request forgery vulnerability th...

Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...

Valve: [GoldSrc] RCE via 'spk' Console Command

Details: Description RCE can be achieved on clients via the 'spk' console command due to missing length checks before copying into a stack based buffer. POC 1. Place the attached cfg file in the root directory of the game: F676967 2. Launch the game and bring up the console with 3. Type in exec...

Eclipse Equinoxe OSGi Console Command Execution Exploit

This Metasploit module exploits the Eclipse Equinoxe OSGi Open Service Gateway initiative console fork command to execute arbitrary commands on the remote system.. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requi...

Monitoring Windows Console Activity (Part 2)

This is the second of two blogs that discuss the implementation of the Windows console architecture from years past, with a primary focus on the current implementation present on modern versions of Windows. Read our first blog, "Monitoring Windows Console Activity Part 1," for more. Capturing the...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a perpetrator to create files that cannot be deleted.

The vulnerability of the embedded software of the OVEEN PLC110 programmable logic controller lies in the absence of restrictions on the length of filenames for written files. Exploiting this vulnerability allows a malicious actor to store files in the file system that cannot be deleted using the...

CVE-2013-2962

Buffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4 allows local users to cause a denial of service process crash or Admin Console command-stream outage via unspecified vectors...

domcon-cmd NSE Script

Runs a console command on the Lotus Domino Console using the given authentication credentials see also: domcon-brute Script Arguments domcon-cmd.cmd The command to run on the remote server domcon-cmd.pass The password used to authenticate to the server domcon-cmd.user The user used to authenticat...

CVE-2006-6610

clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command injection."...

CVE-2002-1137

Buffer overflow in the Database Console Command DBCC that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data...

CVE-2002-1137

Buffer overflow in the Database Console Command DBCC that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data...

CVE-2001-0964

The CVE-2001-0964 entry concerns the Half-Life client (versions 1.1.0.8 and earlier). The vulnerability is a buffer overflow in the client triggered by a long console command, allowing a malicious remote server to execute arbitrary code on the affected system. The impact is remote code execution ...

CVE-2001-0964

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command...

CVE-2001-0964: Undefined Security Weakness

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command...

CVE-2001-0818: Undefined Security Weakness

A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data...

Переполнение буфера в Half Life (buffer overflow)

Переполнение буфера в консольной команде connect которая может быть выполнена по запросу сервера...

CVE-2001-0964

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command...

Tamandua Sekure Labs Security Advisory 2000-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TAMANDUA SEKURE LABS http://tamandua.sekure.org Sao Paulo / Porto Alegre - Brazil Issue: Multiple vulnerabilities in Half-life Dedicated Server for Linux Advisory : sekure-2000-01 Version: 3.1.3.x Patch Availability: Soon Severity: High - Remote acces...