Code execution with blender files

.blend files may contain python code with automatic execution...

Mandrake Security Advisory MDVSA-2009:232 (libsamplerate)

The remote host is missing an update to libsamplerate announced via advisory MDVSA-2009:232. OpenVAS Vulnerability Test $Id: mdksa2009232.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:232 libsamplerate Authors: Thomas Reinke Copyright: Copyright c...

Mandrake Security Advisory MDVSA-2009:232 (libsamplerate)

The remote host is missing an update to libsamplerate announced via advisory MDVSA-2009:232. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2008-6954

The web interface CobblerWeb in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules...

Code injection

The web interface CobblerWeb in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules...

CVE-2008-6954

The web interface CobblerWeb in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules...

CVE-2008-6954: Undefined Security Weakness

The web interface CobblerWeb in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules...

PT-2009-2423

Name of the Vulnerable Software and Affected Versions: Cobbler versions prior to 1.2.9 Description: The issue allows remote authenticated users to execute arbitrary Python code with root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules. This can be...

PYSEC-2009-8

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

Code injection

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0668

Removed by vendor...

Pirch IRC 98 Client (response) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ======================================================= Pirch IRC 98 Client response Remote BOF Exploit SEH ======================================================= !/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | ...

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

Code injection

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

The CVE-2008-6539 entry is concrete: DeStar 0.2.2-5 contains a static code injection in the user/settings/ path that allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter. The underlying issue is a code-in...