Red Hat JBoss BPMS Information Disclosure Vulnerability

Red Hat JBoss BPMS is a business process management platform from Red Hat that combines all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation, and business process monitoring. A remote information disclosure vulnerability exists in Red Hat...

CVE-2016-0349

IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call...

Certec EDV atvise SCADA Server 2.5.9 - Local Privilege Escalation

Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability Vendor: Certec EDV GmbH Product web page: http://www.atvise.com Affected version: 2.5.9 Summary: atvise scada is based on newest technologies and standards: The visualization in pure web technology as well as a consistent...

kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞

0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...

B374K - PHP Webshell with handy features

This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser. Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file, file content,...

Command injection

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

Cisco TelePresence VCS Expressway Process Management Elevation of Privilege Vulnerability

Cisco TelePresence VCS Expressway is a video conferencing application. A security vulnerability in the Cisco TelePresence VCS Expressway process management code allows local users to exploit the vulnerability to execute arbitrary commands with ROOT privileges...

Cisco TelePresence Video Communication Server (VCS) Expressway Privilege Escalation Vulnerability

A vulnerability in the process management code of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to run arbitrary programs with elevated privileges. The vulnerability is due to the failure to protect a supervised process. An attacker...

[SECURITY] Fedora 22 Update: uwsgi-2.0.11.1-1.fc22

uWSGI is a fast pure C, self-healing, developer/sysadmin-friendly application container server. Born as a WSGI-only server, over time it has evolved in a complete stack for networked/clustered web applications, implementing message/object passing, caching, RPC and process management. It uses the...

JBPM jbpm-designer XML External Entity Vulnerability

JBPM full name Java Business Process Management, Business Process Management is a set of open source executable process language framework. jbpm-designer is one of the Web-based jBPM process design tool . JBPM jbpm-designer version 6.0.x and 6.2.x version of the...

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by vulnerabilities in the following subcomponents of the Enterprise Manager Base Platform component : - Agent - UI Framework - Process Management & Notification Note that the product was formerly known...

Unspecified Vulnerability in Oracle Supply Chain Oracle Agile PLM for Process Component

Oracle Supply Chain is a supply chain solution published by Oracle Corporation. A security vulnerability in the Oracle Supply Chain Oracle Agile PLM for Process component allows remote attackers to exploit the vulnerability to compromise system integrity...

CVE-2013-2810

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

Code injection

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

CVE-2013-2810

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

CVE-2013-2810

CVE-2013-2810 affects Emerson Process Management ROC800 RTU family (ROC800/ROC800L/DL8000) with affected software versions (ROC800 3.50 and earlier, DL8000 2.30 and earlier, ROC800L 1.20 and earlier). The vulnerability is a remote command execution via a TCP replay attack, i.e., authentication by...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Process Mgmt and Notification...

CVE-2014-4212

Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Process Mgmt and Notification...

ORACLE Business Process Management (Process Administrator) 5.7-6.0-10.3 - XSS

No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

[OpenedFilesView] View opened/locked files in your system (sharing violation issues)

OpenedFilesView displays the list of all opened files on your system. For each opened file, additional information is displayed: handle value, read/write/delete access, file position, the process that opened the file, and more... Optionally, you can also close one or more opened files, or close t...