Cisco Prime Infrastructure Unauthenticated Remote Code Execution

Cisco Prime Infrastructure CPI contains two basic flaws that when exploited allow an unauthenticated attacker to achieve remote code execution. The first flaw is a file upload vulnerability that allows the attacker to upload and execute files as the Apache Tomcat user; the second is a privilege...

Cisco Prime Infrastructure - (Unauthenticated) Remote Code Execution

Cisco Prime Infrastructure - Unauthenticated Remote Code Execution This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Prime Infrastructure Unauthenticated Remote Code Execution', 'Description...

icc-cpi.int XSS vulnerability

Open Bug Bounty ID: OBB-656803 Description| Value ---|--- Affected Website:| icc-cpi.int Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

icc-cpi.int XSS vulnerability

Vulnerable URL: https://www.icc-cpi.int/get-involved/Lists/EOIList/DispForm.aspx?FollowSite=0='-confirm/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 142382 VIP...

Pivotal Software Cloud Foundry Foundation BOSH Azure CPI Code Injection Vulnerability

Pivotal Software Cloud Foundry Foundation BOSH Azure CPI is a set of open source tools for deployment and lifecycle management of distributed systems from Pivotal Software, USA. A code injection vulnerability exists in version v22 of Pivotal Software Cloud Foundry Foundation BOSH Azure CPI. An...

CVE-2017-4964

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."...

CVE-2017-4964

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."...

CVE-2017-4964

CVE-2017-4964 concerns the Cloud Foundry Foundation BOSH Azure CPI Release v22. The vulnerability enables a maliciously crafted stemcell to execute arbitrary code on VMs created by the BOSH Director, due to a CPI code injection weakness in the Azure CPI v22. Reported impact is elevated, with loca...

CVE-2017-4964

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."...

PT-2017-16231

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation BOSH Azure CPI version v22 Description The issue allows a maliciously crafted stemcell to potentially execute arbitrary code on VMs created by the director. This is described as a CPI code injection issue...

CVE-2017-4964: Improper Control of Generation of Code

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."...

CVE-2017-4964: BOSH Azure CPI code injection vulnerability | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Versions Affected BOSH Azure CPI Release v22 Description The BOSH Azure CPI could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director. Mitigation OSS users are strongly encouraged to follow the...

PT-2016-7338

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.3.9 patch 2 Description The issue allows an attacker to upload a malicious file to any folder on the site via a cpi directory traversal in the Pixidou Image Editor. Recommendations For versions prior to 2.3.9...

cpi-th.com XSS vulnerability

Vulnerable URL: http://www.cpi-th.com/contentsub.php?id='"&subid='"1 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Unfixed XSS vulnerability at www.cpi-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.cpi-immobilier.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It is...