[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2019-16724

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

Design/Logic Flaw

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

CVE-2019-16724

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

CVE-2019-16724

File Sharing Wizard 1.5.0 is affected by a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, enabling remote code execution. Impact is described as remote arbitrary code execution with high severity, via network access without authentication. Several references i...

CVE-2019-16724: Buffer Copy without Checking Size of Input

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

File Sharing Wizard - POST SEH Overflow

This module exploits an unauthenticated HTTP POST SEH-based buffer overflow in File Sharing Wizard 1.5.0. Module Options msf use exploit/windows/http/file/sharingwizardseh msf undefinedsharingwizardseh show actions ...actions... msf undefinedsharingwizardseh set ACTION msf undefinedsharingwizards...

[SECURITY] Fedora 30 Update: curl-7.65.3-4.fc30

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2019-16199

eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process...

Remote code execution

eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process...

CVE-2019-16199

eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process...

CVE-2019-16199

CVE-2019-16199 affects eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18. The issue enables Remote Code Execution by unauthenticated attackers who can reach the device’s web interface and issue an HTTP POST to URLs related to the ReGa core process. The Red Hat/NVD entries corroborate una...

PT-2019-14575

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU2 versions prior to 2.47.18 eQ-3 Homematic CCU3 versions prior to 3.47.18 Description The issue allows remote code execution by unauthenticated attackers with access to the web interface. This is achieved via an HTTP POST...

Elderly China Chopper Tool Still Going Strong in Multiple Campaigns

A nine-year-old web shell used for providing remote access to web servers for cyberattackers is staying very active despite its advanced age in cyber-years, anyway. Researchers said they’ve spotted it being used in several recent campaigns – all with disparate goals. The tool, known as China...

YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection

Exploit Title: YouPHPTube 7.3 SQL Injection Google Dork: / Date: 19.08.2019 Exploit Author: Fabian Mosch, r-tec IT Security GmbH Vendor Homepage: https://www.youphptube.com/ Software Link: https://github.com/YouPHPTube/YouPHPTube Version: 7.3 Tested on: Linux/Windows CVE : CVE-2019-14430 The...

CVE-2016-10790

cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net SEC-192...

PT-2019-7586

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue concerns the lack of TLS usage for HTTP POSTs to listinput.cpanel.net. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue...

CVE-2016-10790: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net SEC-192...

PT-2019-9415

Name of the Vulnerable Software and Affected Versions PrinterOn Central Print Services versions through 4.1.4 Description An issue was discovered in the core components of PrinterOn Central Print Services that create and launch a print job, where they do not perform complete verification of the...

CVE-2018-17210: Improper Authorization

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...