11 matches found
EUVD-2020-17956
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-28941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpiedebug.php or...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
ILIAS Remote Code Execution Vulnerability
ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. A remote code execution vulnerability exists in ILIAS 6.4. The vulnerability stems from a parameter validation error on Magpie RSS data. An attacker can exploit this vulnerability to...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
Remote code execution
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
CVE-2020-25268
ILIAS 6.4 is vulnerable to Remote Code Execution via the external news feed due to incorrect parameter sanitization of Magpie RSS data. The issue affects the Magpie RSS data parsing path, enabling an attacker to execute code remotely. CVSS details indicate a high impact (C, I, A high) with networ...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
Nagios XI Magpie cURL Argument Injection (CVE-2018-15708)
An argument injection vulnerability has been reported in the Magpie RSS module of Nagios XI. The vulnerability is due to insufficient validation of HTTPS URLs submitted to the magpiedebug.php script. A remote, unauthenticated attacker can exploit this vulnerability by sending a request containing...
nagios: Command injection via curl in MagpieRSS
It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system...
RunCMS 2.1 Magpie RSS Module Cross Site Scripting
------------------------------------------------------------------------ Software................RunCMS 2.1 Magpie RSS Module Vulnerability...........Reflected Cross-site Scripting Download................http://www.runcms.org/ Release Date............7/5/2010 Tested On...............Windows Vist...