NfSen 1.3.7 AlienVault OSSIM 4.3.1 - customfmt Command Injection

NfSen 1.3.7 AlienVault OSSIM 4.3.1 - customfmt Command Injection Exploit Title: NfSen/AlienVault remote root exploit command injection in customfmt parameter Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault USM/OSSIM 4.3.1...

NfSen 1.3.7 / AlienVault OSSIM 4.3.1 customfnt Command Injection

Exploit Title: NfSen/AlienVault remote root exploit command injection in customfmt parameter Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault USM/OSSIM 4.3.1 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/...

UBUNTU-CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

NfSen 1.3.7 / AlienVault USM/OSSIM 5.3.4 Command Injection

Exploit Title: NfSen/AlienVault remote root exploit IPC query command injection Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault 5.3.4 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/ Vendor Homepage:...

NfSen <= 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection Vulnerability

Exploit for linux platform in category remote exploits Exploit Title: NfSen/AlienVault remote root exploit IPC query command injection Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault 5.3.4 Vendor Homepage:...

NfSen 1.3.7 AlienVault OSSIM 5.3.4 - Command Injection

NfSen 1.3.7 AlienVault OSSIM 5.3.4 - Command Injection Exploit Title: NfSen/AlienVault remote root exploit IPC query command injection Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault 5.3.4 Date: 2017-07-10 Vendor Homepage:...

Xen 'xen/arch/arm/gic.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen has a security vulnerability that allows an attacker to crash the system by submitting a special request that could be exploited...

Xen grant-table function denial of service vulnerability (CNVD-2017-21748)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. The Xen grant-table feature fails to properly handle the mapping of GNTMAPdevicemap and GNTMAPhostmap, allowing an attacker to exploit a vulnerability by submitting a special...

Xen grant-table function denial of service vulnerability (CNVD-2017-21747)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability in the Xen grant-table feature allows an attacker to exploit the vulnerability by submitting a special request to crash the system...

jabberd2 authentication bypass vulnerability

jabberd2 is a live chat server based on XMMP. A security vulnerability exists in jabberd2 that allows remote attackers to bypass security authentication using SASL ANONYMOUS by submitting a special request...

Xen 'xen/arch/arm/vgic.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A denial-of-service vulnerability exists in Xen 'xen/arch/arm/vgic.c', which allows an attacker to exploit the vulnerability by submitting a special request to crash the system...

The vulnerability in the web console of the Antivirus Kasper’s 8.0 anti-virus software for Linux File Servers allows access to files located on the server.

The vulnerability of the Antivirus Kaspersky 8.0 web console for Linux File Servers relates to the possibility of executing operating system commands. Exploiting this vulnerability allows a malicious actor to gain access to files located on the server by sending a specially crafted GET request wi...

CVE-2017-2805

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send ...

CVE-2017-2831

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

PT-2017-15547 · Foscam · Foscam C1 Indoor Hd Camera

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera affected versions not specified Description: A stack-based buffer overflow issue exists in the web management interface of the affected device. This can be triggered by a specially crafted HTTP request, leading to a...

Microsoft Windows SMB Server SMBv1 Information Disclosure (CVE-2017-0271)

An information disclosure vulnerability exists in the SMB Server component of Microsoft Windows. The vulnerability is due to improper handling of SMBv1 requests. A remote, unauthenticated attacker could exploit the vulnerability by sending a crafted request to a target SMB server...

Linux kernel local memory corruption vulnerability (CNVD-2017-15535)

Linux kernel is an open source operating system. Linux kernel suffers from a memory corruption vulnerability that allows local attackers to bypass the stack guard page by submitting a special request using the vulnerability...

Jetty util/security/Password.java file security bypass vulnerability

Jetty is a Java-based Web server and Java Servlet container . A security vulnerability in the Jetty util/security/Password.java file allows remote attackers to exploit the vulnerability to submit a special request to gain unauthorized access...

GnuTLS Null Pointer Dereference Vulnerability

GnuTLS is an open source implementation of SSL, TLS and DTLS. A security vulnerability exists in GnuTLS decoding stateful responses to TLS extensions, which allows remote attackers to exploit the vulnerability by submitting a special request that crashes the GnuTLS server...

QEMU Denial of Service Vulnerability (CNVD-2017-15516)

QEMU is an open source emulator software. QEMU supports the USB EHCI emulation security vulnerability, which allows local attackers to exploit the vulnerability by submitting a specially crafted request that triggers memory corruption and crashes the application...