1300 matches found
Debian DSA-3779-1 : wordpress - security update
Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to hijack victims' credentials, access sensitive information, execute arbitrary commands, bypass read and post restrictions, or mount denial-of-service attacks. %NASLMINLEVEL 70300 C Tenab...
Remote msfconsole: msf-remote-console
Remote msfconsole A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently as daemon on your server like autopwn2. Although it gives you the ability to remotely use the msfrpcd server it is recommended to...
System privilege elevation vulnerability in Guangsheng FOTA service for multiple mtk platform phones (Phantom Vulnerability)
Shanghai Guangsheng Information Technology Co., Ltd. is the world's leading provider of terminal management cloud platform, FOTA Wireless Upgrade provides professional wireless upgrade solutions for IoT devices smart car, wearable, home, VR, etc.. System privilege elevation vulnerability exists i...
Arbitrary File Read Vulnerability in zzcms 7.2 Version
ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS v7.1 has an arbitrary file read vulnerability that can be exploited by an attacker to access restricted directories and execute commands outside the root directory of the web...
Yokogawa STARDOM Authentication Bypass Vulnerability
Yokogawa STARDOM is prone to an authenticatio bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Samsung Smart Home Camera SNH-P-6410 - Command Injection
E-DB Note: source https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/ import urllib, urllib2, crypt, time New password for web interface webpassword = 'admin' New password for root rootpassword = 'root' IP of the camera ip = '192.168.12.61' These are all for...
Updated ansible packages fix CVE-2016-3096
Updated ansible package fixes security vulnerability: A vulnerability in lxccontainer, ansible module, was found allowing to get root inside the container. The problem is in the createscript function, which tries to write to /opt/.lxc-attach-script inside of the container. If the attacker can wri...
CVE-2016-3655
The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...
Multiple Cross-Site Request Forgery Vulnerabilities in Dating Pro
Dating Pro has multiple cross-site request forgery vulnerabilities. Due to the lack of authentication of the HTTP request sources "/admin/ausers/index" script and "/admin/notifications/settings/" script, an unauthenticated remote attacker can create a specially malicious web page, trick a logged-...
Ubuntu 14.04 LTS : Git vulnerability (USN-2835-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2835-1 advisory. Blake Burkhart discovered that the Git git-remote-ext helper incorrectly handled recursive clones of git repositories. A remote attacker could possibly use this...
Local Elevation of Privilege Vulnerability in Multiple FireEye Products
FireEye is a well-known American cybersecurity company. A local elevation of privilege vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to gain admin privileges and execute arbitrary commands in an affected process...
IBM QRadar Security Information and Event Manager Unspecified Command Injection Vulnerability
IBM QRadar Security Information and Event Manager SIEM is a U.S.-based IBM solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A command injection vulnerability exists in IBM QRadar SIEM version 7.2.x and 7.1 MR2 Patch 1...
Cisco TelePresence Video Communication Server Expressway Operating System Command Injection Vulnerability
Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...
OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods
An improper permission check issue was discovered in the server admission control component in OpenShift. A user with build permissions could use this flaw to execute arbitrary shell commands on a build pod with the privileges of the root user...
Multiple Vulnerabilities in Grandstream GXV3275
The Grandstream GXV3275 is an IP multimedia phone running on Android. Grandstream GXV3275 has multiple security vulnerabilities that could be exploited by remote attackers to submit a special request to execute arbitrary commands, elevate privileges, etc...
WordPress Vernissage Theme <= 1.2.8 - Privilige Escalation
Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...
CVE-2015-0768
The Device Work Center DWC component in Cisco Prime Network Control System NCS 2.10.0.85, 2.20.0.58, and 2.20.0.69 does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371...
CVE-2015-2846
BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...
