CVE-2020-2950

Oracle-BI CVE-2020-2950 إلغاء تسلسل AMF الإصدار: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 التثبيت: https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ المرجع: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f استغلال - PoC amf.bin تروي...

EUVD-2020-30840

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating ro...

CVE-2020-36892 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating ro...

CVE-2020-36894: Missing Authentication for Critical Function

Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative...

CVE-2020-36892: Missing Authentication for Critical Function

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating ro...

PT-2025-50513

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating ro...

Security Bulletin: Security Bulletin: IBM InfoSphere Master Data Management Server vulnerability in OpenSSL

Summary The vulnerability in CVE-2021-3712 have been addressed in the latest interim Fix iFix available on Fix Central for all 3 affected versions. Please note that this CVE only impacts the MessageBroker Suite of MDM Standard Edition SE. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTION:...

CVE-2015-7839: Improper Neutralization of Special Elements used in a Command

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

PT-2015-7637

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager LEM affected versions not specified Description The issue allows remote attackers to execute arbitrary commands on managed computers. This is achieved via a request to the...