Oracle WebLogic Server Deployment Service Servlet Insecure Deserialization (CVE-2018-3252)

An insecure deserialization vulnerability exists in the Oracle WebLogic Server Deployment Service . The vulnerability is due to the lack of input validation by the servlet. A successful attack could lead to a remote code execution...

Unify OpenScape Deployment Service SQL Injection Vulnerability

Unify OpenScape Deployment Service DLS is a suite of deployment tools for Unify products from Unify USA. A SQL injection vulnerability exists in Unify OpenScape DLS versions prior to 6.x and 7.x versions prior to 7 R1.11.3. A remote attacker could exploit the vulnerability to execute arbitrary SQ...

Sql injection

SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2652

SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2652

SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2652

OpenScape Deployment Service (DLS) vulnerability CVE-2014-2652 in multiple Unify/OpenScape deployments. The issue is a SQL injection in DLS before version 6.x and before 7.x R1.11.3, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component/version de...

Microsoft .NET Deployment Service - IE Sandbox Escape (MS14-009) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'dfsvc' = '4.0.30319.17929.17', 'mscorlib' =...

MS14-009 .NET Deployment Service IE Sandbox Escape

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'dfsvc' = '4.0.30319.17929.17', 'mscorlib' =...

MS14-009 .NET Deployment Service IE Sandbox Escape Exploit

This Metasploit module abuses a process creation policy in the Internet Explorer Sandbox which allows to escape the Enhanced Protected Mode and execute code with Medium Integrity. The problem exists in the .NET Deployment Service dfsvc.exe, which can be run as Medium Integrity Level. Further...

MS14-009 .NET Deployment Service IE Sandbox Escape

This module abuses a process creation policy in Internet Explorer's sandbox, specifically in the .NET Deployment Service dfsvc.exe, which allows the attacker to escape the Enhanced Protected Mode, and execute code with Medium Integrity. Module Options msf use exploit/windows/local/ms14/009iedfsvc...