382 matches found
CVE-2013-6056
OSSIM before 4.3.3.1 has telecompress.php path traversal vulnerability...
CVE-2013-6056
OSSIM prior to version 4.3.3.1 is affected by a directory traversal vulnerability in tele_compress.php (timestamp parameter) that could allow a remote attacker to download arbitrary files, subject to web server privileges. This CVE (CVE-2013-6056) is documented across multiple sources (NVD entry ...
CVE-2013-6056
OSSIM before 4.3.3.1 has telecompress.php path traversal vulnerability...
Dsiem - Security Event Correlation Engine For ELK Stack
Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, and...
Remote code execution
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...
CVE-2018-7279
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...
CVE-2018-7279
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...
CVE-2018-7279
CVE-2018-7279 affects AlienVault USM and OSSIM prior to version 5.5.1, describing a remote code execution vulnerability. The available documents identify the affected products and the vulnerability class but do not provide root cause details, exploit vectors, or a confirmed remediation. CNVD and ...
CVE-2018-7279
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...
Alienvault OSSIM av-centerd 4.7.0 get_log_line Command Injection
require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline function found within Util.pm. The vulnerability is triggered due to an unsanitiz...
Alienvault OSSIM av-centerd 4.7.0 - (get_log_line) Command Injection Exploit
Exploit for linux platform in category remote exploits require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline function found within...
Alienvault OSSIM av-centerd Util.pm sync_rserver - Command Execution Exploit
Exploit for linux platform in category remote exploits require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The...
Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)
Alienvault OSSIM av-centerd - Util.pm syncrserver Command Execution Metasploit require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver...
Alienvault OSSIM av-centerd 4.7.0 - get_log_line Command Injection (Metasploit)
Alienvault OSSIM av-centerd 4.7.0 - getlogline Command Injection Metasploit require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline...
Alienvault OSSIM av-centerd 4.7.0 - 'get_log_line' Command Injection (Metasploit)
require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline function found within Util.pm. The vulnerability is triggered due to an unsanitiz...
Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)
require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The vulnerability is triggered due to an incomplete blacklist...
AlienVault OSSIM 5.3.4 RCE
Remote command execution vulnerability in AlienVault OSSIM 5.3.4 nfsen.php customfmt parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
NfSen 1.3.7 / AlienVault USM/OSSIM 5.3.4 Command Injection
Exploit Title: NfSen/AlienVault remote root exploit IPC query command injection Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault 5.3.4 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/ Vendor Homepage:...
AlienVault USM and OSSIM fqdn get_fqdn Command Injection
A command injection vulnerability exists in AlienVault USM and OSSIM. The vulnerability is due to a failure to sanitize input on requests to getfqdn function. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the vulnerable application...
