CVE-2016-4461

Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785...

[ASA-201710-20] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-20 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-449 Summary ======= The package flashplug...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability(CVE-2016-4335)

Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution. Tested Versions Lexmark Perceptive Document Filters Product URLs...

Apache Tomcat PUT method JSP upload

Added: 10/13/2017 BID: 100954 Background Apache Tomcat is a Java web application platform. Problem A vulnerability in Apache Tomcat allows remote attackers to execute arbitrary commands by using the PUT method to upload a JSP file, and then requesting that file. Resolution Upgrade to Apache Tomca...

Red Hat JBoss A-MQ JBoss console arbitrary code execution vulnerability

Red Hat JBoss A-MQ is the United States Red Hat Red Hat company's open source messaging platform. The platform is used to integrate applications , endpoints and devices , and provides a variety of messaging models to support real-time messaging . JBoss console is one of the controller . An...

Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Trend Micro InterScan Messaging Security Virtual Appliance Remote Code Execution", 'Description' = %q This module exploits the authentication bypa...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-30351)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is a set of operating systems for personal computers and the latter is a set of server operating systems.Edge is one of the default browsers that comes with the system.Scripting engine is one o...

Vacron NVR RCE Vulnerability (Oct 2017) - Active Check

Vacron NVR is prone to a remote code execution RCE vulnerability. This vulnerability was known to be exploited by the IoT Botnet SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-7315

UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands...

UBUNTU-CVE-2008-7315

UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands...

Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution Exploit

This Metasploit module exploits the authentication bypass and command injection vulnerability together. Unauthenticated users can execute a terminal command under the context of the web server user. The specific flaw exists within the management interface, which listens on TCP port 443 by default...

Code Execution Vulnerability in Ocean CMS v6.55

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A code execution vulnerability patch bypass exists in Ocean CMS v6.55. Allows an attacker to remotely execute arbitrary code and gain server privileges...

TestLink SQL Injection Vulnerability (CNVD-2017-32128)

Testlink is TestLink team developed a PHP-based open source test management tool . The tool provides test requirements management , test case management and test data statistics and other functions . SQL injection vulnerability exists in versions of TestLink before 1.9.14. A remote attacker can...

KLA11108 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Unspecified...

EMC RSA Archer GRC Platform Cross-Site Scripting Vulnerability (CNVD-2017-32996)

EMC RSA Archer GRC Platform is an enterprise IT governance and compliance governance product from EMC Corporation USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site scripting vulnerability exists in EMC RSA...

Microsoft Office DDE Payload Delivery

This module generates an DDE command to place within a word document, that when executed, will retrieve a HTA payload via HTTP from an web server. Module Options msf use exploit/windows/fileformat/office/ddedelivery msf undefinedddedelivery show actions ...actions... msf undefinedddedelivery set...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

UBUNTU-CVE-2017-15041

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git...

CVE-2017-15041

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git...

[ASA-201710-9] lib32-krb5: arbitrary code execution

Arch Linux Security Advisory ASA-201710-9 ========================================= Severity: High Date : 2017-10-05 CVE-ID : CVE-2017-11462 Package : lib32-krb5 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-415 Summary ======= The package lib32-krb5 befor...