Memory Corruption Vulnerability in Multiple Symantec Products (CNVD-2016-08079)

Symantec Advanced Threat Protection: Network is a suite of software for digging out and removing advanced threats that exist on endpoints, networks, and email gateways; Symantec Endpoint Protection SEP is a suite of antivirus software. A memory corruption vulnerability exists in a number of...

SAP Profile Maintenance Directory Traversal Vulnerability

SAP is a provider of enterprise management software and solutions. A directory traversal vulnerability exists in SAP Profile Maintenance. Because the program fails to repeat user-supplied input, a remote attacker could exploit a specially crafted request with a directory traversal sequence '... /...

CVE-2016-3368

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote authenticated users to execute arbitrary code by leveraging a domain account to make a crafted request, ak...

Remote code execution

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote authenticated users to execute arbitrary code by leveraging a domain account to make a crafted request, ak...

DEBIAN-CVE-2016-6317

Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing...

CVE-2016-6317

Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing...

CVE-2016-6317

Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing...

CVE-2016-1472

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

IBM Connections Cross-Site Request Forgery Vulnerability (CNVD-2016-06649)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site request...

Kodi Web Server 16.1 - Denial of Service

Exploit Title: Kodi 16.1 Web Server Remote DoS Date: 06/08/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: https://kodi.tv/ Software Link:...

Barracuda Web App Firewall/Load Balancer Remote Command Execution Vulnerability

Barracuda is the generic name for a family of hard disk drives from Seagate Technology. A remote command execution vulnerability exists in the Barracuda Web App Firewall Firmware,Load Balancer Firmware. An attack could exploit this vulnerability by sending a specially crafted request that is...

Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit) (3)

Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - Authenticated Remote Command Execution Metasploit 3 Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort [email protected] Vendor Homepage:...

Barracuda Web Application Firewall 8.0.1.008 - (Authenticated) Remote Command Execution (Metasploit)

Barracuda Web Application Firewall 8.0.1.008 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Web Application Firewall 'Barracuda Web Application Firewall %q This module exploits a remote command execution vulnerability in the Barracuda Web Application Firweall firmwar...

Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - Authenticated Remote Root Exploit (Me

Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link:...

Dell OpenManage Server Administrator 8.2 ViewFile Directory Traversal

The version of Dell OpenManage Server Administrator OMSA running on the remote web server is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input to the 'file' parameter in the /ViewFile script. An authenticated, remote attacker who can access an...

Multiple Apple Products libxml2 Memory Corruption Denial of Service Vulnerability (CNVD-2016-05741)

Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. libxslt is an XSLTC library developed for the GNOME project. A security vulnerability in...

Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)

Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalanc...

Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Metasploit)

Exploit Title: Barracuda Spam & Virus Firewall Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/landing/pages/spamfirewall/ Version: Spam and Virus Firewall 'Barracuda Spam...

SAP Predictive Analytics Remote Command Execution Vulnerability

SAP Predictive Analytics is a suite of predictive analytics software. A security vulnerability in SAP Predictive Analytics allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary commands...

The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary code or gain access to protected information.

The vulnerability of the software interface of the Cisco Prime Infrastructure network lifecycle management software is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain access to sensitive information through a specially crafted HTTP...