CVE-2016-4473

/ext/phar/pharobject.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833...

Command injection

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

PYSEC-2017-2

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2016-3690

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload...

Code injection

ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code...

DEBIAN-CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2014-3498

CVE-2014-3498 affects the Ansible user module prior to 1.6.6. The vulnerability allows remote authenticated users to execute arbitrary commands by passing unfiltered content into variables, which may be processed via Jinja2 template rendering, potentially leading to arbitrary code execution on th...

CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

Samba shared library upload and execution

Added: 06/08/2017 CVE: CVE-2017-7494 BID: 98636 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in Samba allows a remote attacker to upload a shared object library to a writab...

Samba shared library upload and execution

Added: 06/08/2017 CVE: CVE-2017-7494 BID: 98636 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in Samba allows a remote attacker to upload a shared object library to a writab...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

Deserialization of untrusted data

VMware vSphere Data Protection VDP 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2017-11315)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the user/index.php fil...

GLSA-201706-13 : minicom: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201706-13 minicom: Remote execution of arbitrary code In minicom before version 2.7.1, the escparms buffer in vt100.c is vulnerable to an overflow. Impact : A remote attacker, able to connect to a minicom port, could possibly...

CVE-2017-9462

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...

Sql injection

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core/admin/modules/developer/modules/views/create.php. The attacker creates a crafted table name at admin/developer/modules/views/create/ and the injection is visible ...

minicom: Remote execution of arbitrary code

Background Minicom is a text-based serial port communications program. Description In minicom before version 2.7.1, the escparms buffer in vt100.c is vulnerable to an overflow. Impact A remote attacker, able to connect to a minicom port, could possibly execute arbitrary code with the privileges o...

The vulnerability of Novell GroupWise software for collaborative work allows a perpetrator to execute arbitrary code.

The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...

Kronos Telestaff SQL Injection

Software: Kronos Telestaff Web Application Version: compare timing with device=stdbrowser&action=doLogin&user='ifDBNAME'TELESTAFF'waitfor%20delay'00%3a00%3a12';--&pwd=&code= PoC 2 - Execute Code Remotely example inject benign code e.g. ping a remote systems ?ph...

VMSA-2017-0010:vSphere Data Protection (VDP) updates address multiple security issues.

VMSA-2017-0010 vSphere Data Protection VDP updates address multiple security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0010 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: vSphere Data Protection VDP updates address multiple...