Apache Continuum 1.4.2 - Multiple Vulnerabilities

Exploit Title: Unauthenticated command injection - Apache Continuum Google Dork: inurl::8080/continuum/ Date: 04/06/2016 Exploit Author: David Shanahan @cyberpunksec Contact: http://www.procheckup.com/ Vendor Homepage: https://continuum.apache.org/ Software Link:...

Apache Continuum 1.4.2 - Multiple Vulnerabilities

Apache Continuum 1.4.2 - Multiple Vulnerabilities Exploit Title: Unauthenticated command injection - Apache Continuum Google Dork: inurl::8080/continuum/ Date: 04/06/2016 Exploit Author: David Shanahan @cyberpunksec Contact: http://www.procheckup.com/ Vendor Homepage: https://continuum.apache.org...

WordPress SP Projects and Document Manager Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress SP Projects and Document Manager Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

[SECURITY] Fedora 23 Update: php-symfony-2.7.13-1.fc23

PHP framework for web projects...

[SECURITY] Fedora 22 Update: php-symfony-2.7.13-1.fc22

PHP framework for web projects...

[SECURITY] Fedora 24 Update: php-symfony-2.7.13-1.fc24

PHP framework for web projects...

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...

Design/Logic Flaw

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0857

CVE-2015-0857 affects tardiff. The vulnerability arises from shell metacharacters in the name of a tar archive or a file within the archive, allowing arbitrary command execution. Public references in the provided documents consistently describe this issue, with Debian noting a fix in tardiff vers...

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0858

Summary: CVE-2015-0858 affects tardiff (Cool Projects). The vulnerability is a local symlink attack on a pathname under /tmp/tardiff-$$, allowing local users to write to arbitrary files. Debian security advisory DLA-564-1 fixes this in tardiff version 0.1-1+deb7u1 for Debian 7 (Wheezy). CVSS data...

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0857: Improper Neutralization of Special Elements used in a Command

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

CVE-2015-0858: Improper Link Resolution Before File Access

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory...