Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A command injection vulnerability exists in Cisco Enterprise NFV...

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability

A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file...

Design/Logic Flaw

CloudForms Management Engine cfme is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user...

CVE-2018-10905

CloudForms Management Engine cfme is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user...

CVE-2018-10905

CloudForms Management Engine cfme is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user...

PT-2018-10173

Name of the Vulnerable Software and Affected Versions CloudForms Management Engine cfme affected versions not specified Description The issue is related to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could exploit this...

CVE-2018-10905: Improper Access Control

CloudForms Management Engine cfme is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user...

CVE-2016-6459: Improper Neutralization of Special Elements used in an OS Command

Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to execute a local shell command injection. More Information: CSCvb25010. Known Affected Releases: 8.1.x. Known Fixed Releases: 6.3.4 7.3.7 8.2.2 8.3.0...

PT-2016-6931

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoints version 8.1.x Description The issue allows an authenticated, local attacker to execute a local shell command injection. Recommendations For version 8.1.x, update to version 8.2.2 or later to resolve the issue...

Local Privilege Escalation

Palo Alto Networks firewalls do not properly validate certain environment variables which can potentially allow executing code with higher privileges Ref PAN-61104/100499/CVE-2016-9151 A potential attacker with local shell access could manipulate arbitrary environment variables which could result...

PT-2016-7668

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.19 and earlier Palo Alto Networks PAN-OS versions 5.1.12 and earlier Palo Alto Networks PAN-OS versions 6.0.14 and earlier Palo Alto Networks PAN-OS versions 6.1.14 and earlier Palo Alto Networks PAN-OS...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

Multiple Cisco IP Phones Firmware Image Upload Vulnerability

A vulnerability in the TFTP implementation of the Cisco Small Business SPA30X and SPA50X IP Phones could allow an unauthenticated, local attacker to load arbitrary firmware images onto the affected device. The vulnerability is due to insufficient file integrity checks of the firmware image. An...

SOL17049 - PHP vulnerability CVE-2015-4598

Important: Although the software of the affected F5 products contains the vulnerable code, the affected F5 products do not use the vulnerable code in a way that exposes the vulnerability in a standard configuration. An attacker must have local shell access to the affected F5 products, to trigger ...

CVE-2014-8003: Improper Input Validation

Cisco Integrated Management Controller in Cisco Unified Computing System 2.22cA and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998...

Webiz 2004 - Local Shell Upload Vulnerability

No description provided by source. Exploit Title: Webiz local SHELL Upload Vulnerability Date: 23-05-2010 Author: kannibal615 Software Link: N/A Version: 2004 Tested on: PHP CVE : N/A Code : @@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@...

Data/File upload and management Arbitrary File Upload Vulnerability

No description provided by source. : Exploit Title: Data/File upload and management local shell upload : : Date: 14/10/2010 : : Author: saudi0hacker : : Software Link: http://resellscripts.info/index.php?route=product/product&productid=137 : : Version: All version : : Tested on: linux b0x : :...

Debian Security Advisory DSA 197-1 (courier)

The remote host is missing an update to courier announced via advisory DSA 197-1. OpenVAS Vulnerability Test $Id: deb1971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 197-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

VisualBoyAdvanced 1.7.x - Non SUID Local Shell

VisualBoyAdvanced 1.7.x - Non SUID Local Shell / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VBA - WEBSITE : vba.ngemu.com Found & coded by Qnix - Qnixatbsdmaildotorg / include char shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" / setuid /...

VisualBoyAdvanced 1.7.x - Non SUID Local Shell

/ VisualBoyAdvanced 1.7.x BufferOver Flow exploit VBA - WEBSITE : vba.ngemu.com Found & coded by Qnix - Qnixatbsdmaildotorg / include char shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" / setuid / "\xeb\x5a\x5e\x31\xc0\x88\x46\x07\x31\xc0\x31\xdb\xb0\x27\xcd"...