EUVD-2016-7422

Malware in sbrugna...

EUVD-2016-7418

Malware in sbrugna...

EUVD-2016-1852

Malware in sbrugna...

EUVD-2016-7419

Malware in sbrugna...

EUVD-2016-1818

Malware in sbrugna...

CVE-2016-6497

A flaw was found in Groovy LDAP. The API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging the returnObjFlag setting. The highest threat from this vulnerability is to data integrity...

Code injection

cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-90...

CVE-2016-10824

CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...

Code injection

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

CVE-2016-10824: Improper Input Validation

cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-90...

PT-2019-7620

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 55.9999.141 Description The issue allows unauthenticated arbitrary code execution via DNS NS entry poisoning. Recommendations For versions prior to 55.9999.141, update to version 55.9999.141 or later to resolve the iss...

PT-2019-7654

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.0 Description The issue allows unauthenticated arbitrary code execution via DNS NS entry poisoning. Recommendations For versions prior to 11.54.0.0, update to version 11.54.0.0 or later to resolve the issue...

CVE-2016-10858: Improper Input Validation

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

Code injection

Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning...

CVE-2016-6500

Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning...

CVE-2016-6500

Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning...

PT-2017-8985

Name of the Vulnerable Software and Affected Versions ForgeRock OpenIDM and OpenICF versions prior to 1.1.1.0 Description The issue is related to unspecified methods in the RACF Connector component that improperly call the SearchControls constructor with returnObjFlag set to true. This allows...

CVE-2016-6500: Improper Input Validation

Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning...

Design/Logic Flaw

main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods...

CVE-2016-6497

main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods...