Ubuntu 14.04 LTS : Git vulnerability (USN-2835-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2835-1 advisory. Blake Burkhart discovered that the Git git-remote-ext helper incorrectly handled recursive clones of git repositories. A remote attacker could possibly use this...

Local Elevation of Privilege Vulnerability in Multiple FireEye Products

FireEye is a well-known American cybersecurity company. A local elevation of privilege vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to gain admin privileges and execute arbitrary commands in an affected process...

IBM QRadar Security Information and Event Manager Unspecified Command Injection Vulnerability

IBM QRadar Security Information and Event Manager SIEM is a U.S.-based IBM solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A command injection vulnerability exists in IBM QRadar SIEM version 7.2.x and 7.1 MR2 Patch 1...

Cisco TelePresence Video Communication Server Expressway Operating System Command Injection Vulnerability

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...

OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods

An improper permission check issue was discovered in the server admission control component in OpenShift. A user with build permissions could use this flaw to execute arbitrary shell commands on a build pod with the privileges of the root user...

Multiple Vulnerabilities in Grandstream GXV3275

The Grandstream GXV3275 is an IP multimedia phone running on Android. Grandstream GXV3275 has multiple security vulnerabilities that could be exploited by remote attackers to submit a special request to execute arbitrary commands, elevate privileges, etc...

WordPress Vernissage Theme <= 1.2.8 - Privilige Escalation

Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...

CVE-2015-0768

The Device Work Center DWC component in Cisco Prime Network Control System NCS 2.10.0.85, 2.20.0.58, and 2.20.0.69 does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371...

CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

CVE-2015-0778

osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...

CVE-2014-9682

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

RedStar 2.0 Desktop - 'World-writeable rc.sysinit' Local Privilege Escalation

Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit" which can be abused to execute commands on boot. An example exploitation of this vulnerability is shown here https://github.com/HackerFantastic/Public/blob/master/exploits/redstar2.0-localroot.png PoC: /bin/echo...

Netcore (Netis) Router 53413/UDP Backdoor Service Vulnerability

Netcore is a Shenzhen Lei Ke network communications producer, the main products involved in wireless routers, wireless network cards, network cards, hubs, switches, broadband routers, Layer 2, 3 and 4 switches, optical terminals. A large number of Netcore/Netis router products in the implementati...

MySQL Load File SQL Injection

An SQL injection vulnerability exists in MySQL database server. SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code...

Unprotected Telnet Service

An unprotected Telnet service is listening on this port. A remote attacker can utilize this to execute commands on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79235; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2014/11/13 19:54:52 $";...

phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit

No description provided by source. ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1 possibly prior versions shell inject by rgod site: http://rgod.altervista.org make these changes in your php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...

Mambo Colophon Component <= 1.2 - Remote Inclusion Vulnerability

No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...

CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves it's configuration to the .cdrda...

Cisco Catalyst 3500 XL Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1846/info A vulnerability exists in the webserver configuration interface which will allow an anonymous user to execute commands. A http request which includes /exec and a known filename will reveal the contents of the...

phpMyNewsLetter 0.6.10 Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow an attacker ...