Accellion FTA - getStatus Command Injection (CVE-2015-2857)

Exploits CVE-2015-2857 by injecting OS commands via oauthtoken on /tws/getStatus. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA getStatus oauthtoken RCE CVE-2015-2857 — opens execute session.""" import re from urllib.parse import quote from...

Accellion FTA - getStatus RCE Detection (CVE-2015-2857)

Detects CVE-2015-2857 by POSTing oauthtoken=';echo ' to /tws/getStatus and matching Success resultmsg. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA oauthtoken command injection CVE-2015-2857.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2026-11475

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...

EUVD-2026-35006

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...

CVE-2026-11475

The CVE-2026-11475 affects Kushan2k student-management-system. Affects the function getStatus in controllers/GradeController.php of the Certificate Verification Endpoint. The underlying issue is that manipulating the nic argument can cause an SQL injection, enabling remote exploitation. Public ex...

CVE-2026-11475 Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...

CVE-2026-11475: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...

PT-2025-45749

Jenkins MCP Server Plugin 0.84.v50ca 24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission getJobSc...

EUVD-2008-7273

Malware in sbrugna...

CVE-2008-20001

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

CVE-2008-20001

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

CVE-2008-20001 activePDF WebGrabber ActiveX Control Buffer Overflow

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

CVE-2008-20001

ActivePDF WebGrabber 3.8.2.0 is affected by a stack-based buffer overflow in the GetStatus() method of the APWebGrb.ocx ActiveX control. Passing an overly long string to this method can allow a remote attacker to execute arbitrary code in the context of the vulnerable process. Exploitation is pos...

CVE-2008-20001 activePDF WebGrabber ActiveX Control Buffer Overflow

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

CVE-2008-20001

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

ActivePDF WebGrabber security vulnerability

ActivePDF WebGrabber is a server-side HTML/URL to PDF conversion control from ActivePDF open source. A security vulnerability exists in ActivePDF WebGrabber version 3.8.2.0, which stems from a stack buffer overflow in the GetStatus method of the APWebGrb.ocx ActiveX control, which could lead to t...

CVE-2008-20001: Stack-based Buffer Overflow

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...

PT-2025-35363

Name of the Vulnerable Software and Affected Versions: activePDF WebGrabber version 3.8.2.0 Description: activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow in the GetStatus method of the APWebGrb.ocx ActiveX control. Passing an overly long string to this method can allow ...

Gather Quake Server Information

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gather Quake Server Information', 'Description' = %q This module uses the getstatus or getinfo request to obtain information from a Quakeserver. ...

PT-2024-7181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ast udc getstatus function in the aspeed udc module of the Linux kernel's USB gadget driver. It involves incorrect index calculation, which could allow an...