CVE-2017-5794: Improper Input Validation

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2016-8529: Improper Access Control

A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version...

CVE-2016-8523: Improper Neutralization of Special Elements used in a Command

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

Fedora 27 : libreoffice (2018-3eb4d8e4c4)

The remote Fedora 27 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-3eb4d8e4c4 advisory. - CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula Tenable has extracted the preceding description block directly...

WSR-300HP vulnerable to arbitrary code execution

Overview WSR-300HP provided by BUFFALO INC. contains an arbitrary code execution vulnerability. WSR-300HP provided by BUFFALO INC. is a wireless LAN router. WSR-300HP contains an arbitrary code execution vulnerability. Impact By executing a specially crafted request prepared by a remote attacker,...

CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

CVE-2016-7641

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Android Code Execution

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

PT-2017-8899

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.6 Description The issue is caused by the improper validation of file extensions, allowing a remote attacker to upload arbitrary files. This could enable the attacker to execute arbitrary...

PT-2017-9878

Name of the Vulnerable Software and Affected Versions IBM Kenexa LMS on Cloud affected versions not specified Description The issue allows a remote attacker to upload arbitrary files, potentially enabling the execution of arbitrary code on the vulnerable server. Recommendations At the moment, the...

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

HPE Synergy Planning Tool Remote Arbitrary Code Execution Vulnerability

HPE Synergy Planning Tool is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE CISSS Remote Arbitrary Code Execution Vulnerability

HPE Converged Infrastructure Solution Sizer Suite CISSS is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Windows Code Execution

The vulnerability of the Windows Journal component of the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially created Journal file...

PT-2016-1922

Name of the Vulnerable Software and Affected Versions Adobe Reader versions affected versions not specified Adobe Acrobat versions affected versions not specified Description The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This...

PT-2016-1696

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Microsoft Word version 2016 for Mac Microsoft Office Compatibility Pack version SP3 Microsoft Excel Viewer Description The issue is caused by a buffer overflow. Exploitation of this issue may allo...

File Replication Pro 7.2.0 Command Execution / File Disclosure / Traversal

Vantage Point Security Advisory 2016-001 ================================ Title: File Replication Pro Remote Command Execution Vendor: File Replication Pro Vendor URL: http://www.filereplicationpro.com/ Versions affected: = Permalink: Summary: -------- File Replication Pro FRP is a file managemen...

File Replication Pro 7.2.0 - Multiple Vulnerabilities

Exploit for jsp platform in category remote exploits Title: File Replication Pro Remote Command Execution Vendor: File Replication Pro Vendor URL: http://www.filereplicationpro.com/ Versions affected: = Permalink: Summary: -------- File Replication Pro FRP is a file management solution that is us...

Oracle BeeHive 2 Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...