[SECURITY] [DLA 938-1] git security update

Package : git Version : 1:1.7.10.4-1+wheezy4 CVE ID : CVE-2017-8386 Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help". For Debian 7 "Wheezy", these...

Debian Security Advisory DSA 3848-1 (git - security update)

Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn OpenVAS Vulnerability Test $Id: deb3848.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3848-1...

Mura CMS 7.0.6967 Cross Site Scripting

Credits =============== Zhao Liang, Huawei Weiran Labs Vendor: =============== Blue River Interactive Group Product: ======================== Mura CMS Mura CMS is built with one focused purpose in mind - to make it easier and faster for people to build and maintain even the most ambitious website...

CVE-2017-3881: Cisco Catalyst switches remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Your Catalyst switches whether to enable the telnet in? If Yes, it would have to be careful. This article will be to introduce the reader for the equipped with the latest firmware the Catalyst 2960 switch the remote code execution vulnerability proof-of-concept attack technique. Specific exploit...

Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability

Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...

CVE-2017-6033: Uncontrolled Search Path Element

A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System IGSS Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path...

PT-2017-16848

Name of the Vulnerable Software and Affected Versions Schneider Electric Interactive Graphical SCADA System IGSS Software versions prior to 12 Description A DLL Hijacking issue allows execution of a malicious file if it is named the same as a legitimate file and placed in a location that is earli...

Fortinet FortiOS SSH Undocumented Interactive Login Vulnerability (FG-IR-16-001) (SSH) - Active Check

An undocumented account used for communication with authorized FortiManager devices exists on some versions of FortiOS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

StrutsShell Apache Struts CVE-2017-5638 Shell Introducti...

Struts2Shell - Interactive Shell Command to Exploit Apache Struts CVE-2017-5638

Improves manipulation and sending commands to the vulnerable Apache Struts server using a shell. Usage: python Struts2Shell.py Download Struts2Shell...

Interactive Multi User Javascript Shell: JSShell

Interactive Multi User Javascript Shell An interactive multi-user web based shell written in Python with Flask for server side and of course Javascript and HTML client side. It was initially created in order to debug remote esoteric browsers during tests and research. Features Multi client suppor...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object using the session moniker the DCOM activator doesn’t check if the current...

shopify-scripts: SIGABRT in only mirb

PoC ------------------- The following code triggers the bug attached as test.rb: def tostr 00end 0.times Debug - mirb ------------------- The program being debugged has been started already. Start it from the beginning? y or n y Starting program: /home/x/Desktop/test/mruby/bin/mirb test.rb mirb -...

[SECURITY] Fedora 25 Update: mupdf-1.10a-1.fc25

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

[SECURITY] Fedora 24 Update: mupdf-1.10a-1.fc24

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Taoyun Interactive Android app suffers from arbitrary password reset vulnerability

Tao Yun Interactive App is a children's learning and socialization app. Taoyun Interactive Android app has an arbitrary password reset vulnerability. It allows attackers to exploit the vulnerability to change the password of the other party by only requiring their cell phone number...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Client Expert 1.0.1 - SQL Injection

Client Expert 1.0.1 - SQL Injection Exploit Title: Complete Client Management & Billing v1.0.1 Script- SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://www.ynetinteractive.com/ Software Buy: http://www.ynetinteractive.com/clientexpert/demo.php Demo:...

Complete Client Management And Billing 1.0.1 SQL Injection

Exploit Title: Complete Client Management & Billing v1.0.1 Script- SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://www.ynetinteractive.com/ Software Buy: http://www.ynetinteractive.com/clientexpert/demo.php Demo: http://www.ynetinteractive.com/clientexpert/demo.php Version...

[SECURITY] Fedora 24 Update: mapserver-6.2.4-1.fc24

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...