Sql injection

SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases...

CVE-2016-0710

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the 1 role or 2 user parameter to services/usermanager/users/...

OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution

Exploit for php platform in category web applications OpenCart jsondecode function Remote PHP Code Execution Author: Naser Farhadi Twitter: @naserfarhadi Date: 9 April 2016 Version: 2.1.0.2 to 2.2.0.0 Latest version Vendor Homepage: http://www.opencart.com/ Vulnerability: ------------...

CVE-2016-3987

CVE-2016-3987 concerns the HTTP server in Trend Micro Password Manager, where the URL parameter to api/openUrlInDefaultBrowser or api/showSB can lead to remote command execution. The vulnerability implies a command-injection flaw in the server’s handling of specific URL queries, enabling an attac...

DEBIAN-CVE-2016-2324

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a 1 long filename or 2 many nested trees, which triggers a heap-based buffer overflow...

CVE-2016-3153

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrerentites function...

flash-plugin: multiple code execution issues fixed in APSB16-10

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

Android Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Codec in Android versions prior to 6.0 and prior to 6.0.1. A remote attacker can exploit this vulnerability to cau...

CVE-2016-2292

Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors...

Apache Continuum Arbitrary Command Execution

This module exploits a command injection in Apache Continuum use exploit/linux/http/apache/continuumcmdexec msf undefinedcontinuumcmdexec show actions ...actions... msf undefinedcontinuumcmdexec set ACTION msf undefinedcontinuumcmdexec show options ...show and set options... msf...

Slackware mercurial packet arbitrary code execution vulnerability (CNVD-2016-02025)

Slackware is an open source GNU/Linux operating system developed by software developer Patrick Volkerding. A security vulnerability exists in Slackware's mercurial packets. A remote attacker could exploit the vulnerability to execute arbitrary code...

CVE-2016-2000

HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

MeshCMS 3.6 Remote Command Execution

Exploit Title: MeshCMS 3.6 – Command Execution Vulnerability Date: 2016-04-03 Exploit Author: piaox xiong Vendor Homepage: http://www.cromoteca.com/en/meshcms/ Software Link: http://www.cromoteca.com/en/meshcms/download/ Version: 3.6 Tested on: Windows OS Application Description: MeshCMS is an...

Struts2 Remote Command Execution Vulnerability in OA System of Beijing Hurong Times Software Co.

Beijing Hurong Times Software Co., Ltd OA system is a set of daily operation and management application system for organizations. The OA system of Beijing Hurong Times Software Co., Ltd. suffers from a Struts2 remote command execution vulnerability, which can be exploited by an attacker to remote...

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

Atlassian Bamboo Ignite Realtime Smack XMPP API Arbitrary Code Execution Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability in the Ignite Realtime Smack XMPP API used in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x prior to 5.10.0 can be exploited by remote attackers to execute arbitrary Java code...

Kamailio 4.3.4 - Heap Based Buffer Overflow

Exploit for linux platform in category dos / poc CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server...

HID discoveryd command_blink_on Unauthenticated RCE

This module exploits an unauthenticated remote command execution vulnerability in the discoveryd service exposed by HID VertX and Edge door controllers. This module was tested successfully on a HID Edge model EH400 with firmware version 2.3.1.603 Build 04/23/2012. Module Options msf use...

CVE-2016-1778

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1768

CVE-2016-1768 affects Apple QuickTime on macOS OS X El Capitan (versions up to 10.11.3) via malicious FlashPix FPX files. Root cause: memory corruption during FPX parsing, allowing remote code execution or memory corruption. Exploitation status: exploit examples exist (Exploit-DB entries referenc...