Lucene search
+L

451 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•41 views

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

6.8CVSS0.4AI score0.26639EPSS
SaveExploits9
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

JBoss JMX Console Deployer Upload and Execute

No description provided by source...

7.1AI score
SaveExploits0
CVE
CVE
•added 2012/09/05 11:00 p.m.•56 views

CVE-2012-3537

CVE-2012-3537 affects the Crowbar project’s Crowbar Deployer, specifically the Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb). The vulnerability is due to insecure handling of temporary files and predictable file names, enabling local users to execute arbitrary shell commands....

4.6CVSS6.5AI score0.0059EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
•added 2012/09/05 11:00 p.m.•39 views

CVE-2012-3537

The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...

7.2AI score0.0059EPSS
SaveExploits1References10
Exploit DB
Exploit DB
•added 2010/12/14 12:00 a.m.•295 views

Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution (Metasploit)

$Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

10CVSS5.5AI score0.78995EPSS
SaveExploits26
Exploit DB
Exploit DB
•added 2010/10/19 12:00 a.m.•183 views

JBoss JMX - Console Deployer Upload and Execute (Metasploit)

$Id: jbossmaindeployer.rb 10754 2010-10-19 22:24:33Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.5CVSS5.6AI score0.82256EPSS
SaveExploits5
Prion
Prion
•added 2007/05/16 1:19 a.m.•27 views

Design/Logic Flaw

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files...

7.1CVSS7.3AI score0.29305EPSS
SaveExploits4References7Affected Software1
Cvelist
Cvelist
•added 2007/05/16 1:00 a.m.•41 views

CVE-2007-2699

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files...

6.8AI score0.29305EPSS
SaveExploits4References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/16 12:00 a.m.•4 views

CVE-2007-2699: Undefined Security Weakness

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files...

7.1CVSS6AI score0.29305EPSS
SaveExploits4References1
Metasploit
Metasploit
•added 2007/02/20 12:00 a.m.•310 views

JBoss JMX Console Deployer Upload and Execute

This module can be used to execute a payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:MainDeployer functionality. To accomplish this, a temporary HTTP server is created to serve a WAR archive containing our payload...

8.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/01 12:00 a.m.•5 views

CVE-2005-4752: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role...

4.6CVSS5.9AI score0.00349EPSS
SaveExploits0References1
Rows per page
Query Builder