CVE-2021-40859

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Enterprise Manager for Siebel...

Oracle HRMS (Republic of Korea) security vulnerabilities

A security vulnerability exists in Oracle HRMS Republic of Korea versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Korean Payroll component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Fluid Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates,...

Oracle Application Object Library security vulnerability

A security vulnerability exists in Oracle Application Object Library versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Flexfields component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of the Oracle Application...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can create, delete, or modify critical data or all...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Backend-as-a-Service component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can unauthorizedly update, insert, ...

Oracle Cost Management security vulnerability

A security vulnerability exists in Oracle Cost Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Cost Maintenance component and may allow attackers with limited privileges to gain HTTP access and take control of Oracle Cost Management...

Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...

Oracle US Federal Human Resources security vulnerability

A security vulnerability exists in Oracle US Federal Human Resources versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain HTTP access, thereby accessing critical data without...

Oracle Siebel CRM Deployment information disclosure vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain an information disclosure vulnerability. This vulnerability stems from issues within the Cloud Gateway component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to gain HTTP access and take control of Oracle Outside In Technology...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues with the Java Based Agent component. This vulnerability may allow unauthenticated attackers to gain HTTP access and unauthorizedly read certain accessible data within Oracle Essbase...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle Siebel Apps - Financial Services security vulnerabilities

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...