Calibre 7.15.0 Python Code Injection

class MetasploitModule 'Calibre Python Code Injection CVE-2024-6782', 'Description' = %q This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled disabled by default, it will listen in its default configuration on all...

PT-2024-5692 · Calibre · Calibre

Name of the Vulnerable Software and Affected Versions: Calibre versions 6.9.0 through 7.14.0 Description: The issue is related to improper access control in the software, which allows unauthenticated attackers to achieve remote code execution. This is due to a vulnerability associated with...

Calibre Python Code Injection (CVE-2024-6782)

This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, or delete data...

CVE-2024-20928

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content...

CVE-2024-20928

CVE-2024-20928 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected version: 12.2.1.4.0. Description indicates an input-validation/logic flaw allowing an unauthenticated attacker with network access via HTTP to compromise the server, potentially enabling...

PT-2024-1191 · Oracle · Oracle Webcenter Content

Name of the Vulnerable Software and Affected Versions: Oracle WebCenter Content version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the Content Server component of Oracle WebCenter Content, allowing an unauthenticated attacker with network access via HTTP to...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to access confidential information.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to gain access to confidential information from a remote location...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

Design/Logic Flaw

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 is affected by a privilege-escalation vulnerability. A root-owned SUID binary, dm_secure_writer, can bypass security controls to enable an arbitrary file write as root from a non-privileged Documentum user. Documents from Red Hat and PTSecurity corro...

PT-2023-23499 · Opentext · Opentext Documentum Content Server

Name of the Vulnerable Software and Affected Versions: OpenText Documentum Content Server versions prior to 23.2 Description: The issue allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root-owned SUID binary dm secure writer. Thi...

OpenText Documentum Content Server 安全漏洞

OpenText Documentum Content Server is a data storage platform from OpenText, Inc. that is used to provide secure, enterprise-wide control over any type of content. A security vulnerability exists in OpenText Documentum Content Server versions prior to 23.2, which stems from a privilege escalation...

SAP Content Server Cross-Site Scripting Vulnerability

SAP Content Server is a standalone component that can store any format and content. A cross-site scripting vulnerability exists in SAP Content Server version 7.53, which can be exploited by attackers to inject malicious JavaScript scripts...

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

Cross site scripting

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...