Lucene search
+L

838 matches found

Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•14 views

PT-2018-5670 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.8AI score0.0607EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•18 views

PT-2018-5675 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.6AI score0.05991EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/09 12:00 a.m.•3 views

CVE-2017-14474: Improper Neutralization of Special Elements used in an OS Command

In the MMM::Agent::Helpers::execute function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An attacker that can...

10CVSS8.2AI score0.0607EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•11 views

PT-2018-5676 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the MMM::Agent::Helpers::Network::send arp function, resulting in arbitrary comma...

10CVSS8.3AI score0.05773EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•18 views

PT-2018-5673 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.8AI score0.05991EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/09 12:00 a.m.•5 views

CVE-2017-14476: Improper Neutralization of Special Elements used in an OS Command

In the MMM::Agent::Helpers::Network::addip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for Solaris, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

10CVSS8.3AI score0.05991EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/09 12:00 a.m.•6 views

CVE-2017-14480: Improper Neutralization of Special Elements used in an OS Command

In the MMM::Agent::Helpers::Network::clearip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for FreeBSD, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

10CVSS8.3AI score0.05991EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2018/05/03 12:00 a.m.•206 views

Exim base64d Remote Code Execution

!/usr/bin/python import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; [email protected]" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0 def p...

7.5CVSS7.9AI score0.82137EPSS
SaveExploits19
OSV
OSV
•added 2018/03/01 8:29 p.m.•29 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8.2AI score
SaveExploits0References3
NVD
NVD
•added 2018/03/01 8:29 p.m.•23 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS8.1AI score0.02295EPSS
SaveExploits0References3
OSV
OSV
•added 2018/03/01 8:29 p.m.•19 views

UBUNTU-CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS7.6AI score0.02295EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/03/01 8:29 p.m.•30 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS7.6AI score0.02295EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/03/01 7:00 p.m.•124 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS7.6AI score0.02295EPSS
SaveExploits0
Cvelist
Cvelist
•added 2018/03/01 7:00 p.m.•44 views

CVE-2017-9274 osc executes spec code during "osc commit"

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8AI score0.02295EPSS
SaveExploits0References3
CVE
CVE
•added 2018/03/01 7:00 p.m.•70 views

CVE-2017-9274

CVE-2017-9274 describes a shell command injection in the OpenBuild/OpenSUSE component obs-service-source_validator (before version 0.7 ). The underlying issue allows an attacker to execute arbitrary code as the packager when validating RPM SPEC files that use specific macro constructs. Multiple c...

9.3CVSS7.6AI score0.02295EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/01 12:00 a.m.•3 views

CVE-2017-9274: Improper Neutralization of Special Elements used in an OS Command

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS7.6AI score0.02295EPSS
SaveExploits0References3
NVD
NVD
•added 2017/11/17 8:29 p.m.•35 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS10AI score0.06467EPSS
SaveExploits0References4
CVE
CVE
•added 2017/11/17 8:00 p.m.•64 views

CVE-2017-1000215

CVE-2017-1000215 affects ROOT xrootd versions 4.6.0 and earlier, exposing an unauthenticated shell command injection that enables remote code execution. The vulnerability is documented across multiple advisories (NVD, SUSE, Gentoo GLSA) indicating remote code execution via a shell command injecti...

10CVSS10AI score0.06467EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2017/11/17 8:00 p.m.•44 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10AI score0.06467EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2017/11/17 8:00 p.m.•68 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS5.9AI score0.06467EPSS
SaveExploits0
Rows per page
Query Builder