1934 matches found
Arbitrary Code Write Vulnerability in SeaCMS admin/admin_weixin.php File
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary code write vulnerability exists in the admin/adminweixin.php file in SeaCMS version v6.5.8, which can be exploited by an attacker...
D-Link DSL-6850U Router Remote Command Execution Vulnerability
The D-Link DSL-6850U is a wireless router product from AUO D-Link. The D-Link DSL-6850U router is vulnerable to remote command execution. As the router has a remote web management service enabled by default, a default credential support:support exists for this service and cannot be disabled. An...
CVE-2017-12340
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...
osCommerce 2.3.4.1 - Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: osCommerce 2.3.4.1 Authenticated Arbitrary File Upload Exploit Author: Simon Scannell - https://scannell-infosec.net Vendor Homepage: https://www.oscommerce.com/ Software Link: https://www.oscommerce.com/Products&Download=oscom2...
Altum Router Privilege Escalation
The vulnerability of the Altum router microprogramming system is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to the embedded operating system with administrator privileges using SSH or Telnet connections...
osCommerce 2.3.4.1 - Arbitrary File Upload
osCommerce 2.3.4.1 - Arbitrary File Upload Exploit Title: osCommerce 2.3.4.1 Authenticated Arbitrary File Upload Date: 11.11.2017 Exploit Author: Simon Scannell - https://scannell-infosec.net Vendor Homepage: https://www.oscommerce.com/ Software Link:...
osCommerce 2.3.4.1 - Arbitrary File Upload
Exploit Title: osCommerce 2.3.4.1 Authenticated Arbitrary File Upload Date: 11.11.2017 Exploit Author: Simon Scannell - https://scannell-infosec.net Vendor Homepage: https://www.oscommerce.com/ Software Link: https://www.oscommerce.com/Products&Download=oscom234 Version: 2.3.4.1, 2.3.4 - Other...
D-Link DGS-1500 Ax RCE Vulnerability
D-Link DGS-1500 Ax devices before 2.51B021 are vulnerable to remote code execution RCE. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...
F5 Networks BIG-IP : Linux kernel vulnerability (K05513373)
The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging access to a /dev/sg device...
IDEMIA MorphoSmart 1300 Series device certificate import module privilege acquisition vulnerability
IDEMIA formerly Morpho MorphoSmart 1300 Series a.k.a. MSO 1300 Series devices are fingerprint identification devices from IDEMIA formerly Morpho, France. certificate import component is one of the certificate import components. The certificate import component is one of the certificate import...
MitraStar DSL-100HN-T1/GPT-2541GNAC Privilege Escalation
Exploit Title: Privilege escalation MitraStar routers Date: 28-10-2017 Exploit Author: j0lama Vendor Homepage: http://www.mitrastar.com/ Provider Homepage: https://www.movistar.com/ Models affected: MitraStar DSL-100HN-T1 and MitraStar GPT-2541GNAC HGU Software versions: ES113WJY0b16 DSL-100HN-T1...
CVE-2017-15909
D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access...
CVE-2017-15909
D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access...
CVE-2017-15909
The CVE-2017-15909 entry applies to D-Link DGS-1500 Ax switches with versions before 2.51B021, which contain a hardcoded password enabling remote shell access. The RCE/unauthorized access stems from credential hardcoding in the device firmware, allowing an attacker to obtain shell access without ...
CVE-2017-15909: Use of Hard-coded Credentials
D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access...
PT-2017-14278 · D Link · D-Link Dgs-1500
Name of the Vulnerable Software and Affected Versions: D-Link DGS-1500 Ax versions prior to 2.51B021 Description: The issue allows remote attackers to obtain shell access due to a hardcoded password. Recommendations: For versions prior to 2.51B021, update to version 2.51B021 or later to resolve t...
Cisco Unified Computing System Central Privilege Escalation
The vulnerability of the Command Line Interface CLI of the Cisco Unified Computing System Central management system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious individual to increase their privileges and gain access to the system’s...
Design/Logic Flaw
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell...
