293 matches found
Remote Code Execution (RCE)
Tablib is vulnerable to remote code execution RCE. These attacks are possible because untrusted data is deserialized allowing attacks to execute python code...
CVE-2015-6531: Improper Control of Generation of Code
Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...
PT-2017-7032
Name of the Vulnerable Software and Affected Versions Palo Alto Networks Panorama VM Appliance versions prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary Python code via a crafted firmware image file. Recommendations For versions prior to 6.0.1, update to version...
CVE-2017-7235
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0...
PT-2017-17597
Name of the Vulnerable Software and Affected Versions cloudflare-scrape versions 1.6.6 through 1.7.1 Description A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. Recommendations For versions 1.6.6 through 1.7.1,...
Apport Arbitrary Code Execution Vulnerability
Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in versio...
CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
PT-2016-7885
Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.20.4 Description An issue in Apport allows remote attackers to execute arbitrary Python code. This occurs when Apport reads the CrashDB field in apport/ui.py and evaluates it as Python code if the field begins with a...
CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
UBUNTU-CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
CVE-2014-2331: Improper Control of Generation of Code
CheckMK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...
PT-2015-3706
Name of the Vulnerable Software and Affected Versions Check MK versions 1.2.2p2 through 1.2.3i5 Description The issue allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. This can be exploited by remote attackers. Recommendations For versio...
CVE-2015-3446
The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file .cfg...
CVE-2015-3446: Improper Control of Generation of Code
The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file .cfg...
CVE-2015-0693
CVE-2015-0693 affects Cisco Web Security Appliance (WSA) devices running 8.5.0-ise-147, where improper handling of the pickle module during tunnel-status checks allows an authenticated, local attacker to execute arbitrary Python code and elevate privileges via a crafted pickle file (Bug CSCut3925...
PT-2015-4814
Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA version 8.5.0-ise-147 Description The issue is related to the improper restriction of the pickle Python module during tunnel-status checks, allowing local users to execute arbitrary Python code and gain...
CVE-2012-5495
pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "goback."...
CVE-2012-5495
pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "goback."...