8560 matches found
Command Injection
Overview closure-compiler-stream is a Streaming interface for closure compiler. Affected versions of this package are vulnerable to Command Injection. The argument options of the exports function in index.js can be controlled by users without any sanitization. PoC var root =...
Fruitful < 3.8.2 - Authenticated Stored XSS & Theme Options Deletion
The lack of capability and nonce checks in the fruitfuldatasave ajax call could allow attacker to perform stored XSS attack using a low privilege account. "Three other AJAX actions that should be accessible to the administrator only are accessible to any authenticated users: fruitfulresetbtn: thi...
Froxlor Remote Code Execution Vulnerability
Froxlor is a server administration control panel that can be used to manage multi-user or shared servers. A remote code execution vulnerability exists in Froxlor versions prior to 0.10.14. A remote attacker can exploit this vulnerability to execute arbitrary code via database configuration option...
CVE-2020-10235
An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of backupExistingDatabase in install/lib/class.FroxlorInstall.php...
Arista Networks EOS kernel DoS (SA0040)
The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in the Linux kernel. An unauthenticated, remote attacker can exploit this, by sending malformed packets with rarely used packet options to a vulnerable switch. Note that Nessus has not...
CVE-2020-10105
An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html...
Enpeem Command Execution Vulnerability
Enpeem is a lightweight package for programmatically accessing NPM. A security vulnerability exists in Enpeem 2.2.0 and earlier versions, which originates when the program sends the 'options.dir' parameter directly to the 'exec' function without performing any cleanup operations. The vulnerabilit...
Command Injection
Overview enpeem is a lightweight wrapper for accessing npm programmatically alternative to adding npm as a dependency Affected versions of this package are vulnerable to Command Injection. The options.dir argument is provided to the exec function without any sanitization. PoC By JHU System Securi...
Security Bulletin: Information disclosure vulnerability in WebSphere Application Server which is shipped with Jazz for Service Management (CVE-2019-4477)
Summary There is an information disclosure in WebSphere Application Server when using Security Auditing. Vulnerability Details CVEID: CVE-2019-4477 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information,...
The vulnerability of the BIND DNS server, related to incorrect processing of messages containing certain combinations of EDNS options, allows attackers to trigger a service failure.
The vulnerability of the BIND DNS server is related to the improper processing of messages that contain certain combinations of EDNS options. Exploiting this vulnerability allows a remote attacker to cause service failures...
Unspecified vulnerability in WordPress motors-car-dealership-classified-listings
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the includes/options.php file in WordPress...
CVE-2019-17229
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress has multiple stored XSS issues...
CVE-2019-17228
The CVE-2019-17228 entry concerns the Motors Car Dealer & Classified Ads WordPress plugin (through version 1.4.0). The connected Nuclei template confirms an unauthenticated settings import/export flaw in includes/options.php that allows unauthenticated changes to plugin options, enabling configur...
danfruehauf NetworkManager-ssh elevation of privilege vulnerability
NetworkManager-ssh is NetworkManager's SSH VPN integration. An elevation of privilege vulnerability exists in danfruehauf NetworkManager-ssh versions prior to 1.2.11. The vulnerability stems from mishandling of other options. No detailed vulnerability details are provided at this time...
CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
DEBIAN-CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
Privilege escalation
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
UBUNTU-CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
CVE-2020-9355
NetworkManager-ssh (the plugin for NetworkManager) is affected by CVE-2020-9355. Vulnerable component: network-manager-ssh before 1.2.11; root cause is mishandling of extra SSH options, enabling privilege escalation by a local user who can modify a connection. Impact per sources: local privilege ...
