361 matches found
CVE-2017-12351
A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due t...
The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code
The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient checking of file copy addresses. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using specially...
bash: popd controlled free
A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session...
Ceragon FibeAir IP-10 7.2.0 Hidden User Backdoor
Credits: Ian Ling + Website: iancaling.com + Source: http://blog.iancaling.com/post/160817658078 Vendor: ================= https://www.ceragon.com Products: ====================== Ceragon FibeAir IP-10 =7.2.0 latest version Vulnerability Types: =================== Hidden User Backdoor...
CVE-2017-8386
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with...
The vulnerability of the SSH network protocol, related to the disclosure of information, allows a perpetrator to gain access to confidential data.
The vulnerability of the SSH network protocol is related to an error in password hashing. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...
Google Android Remote Elevation of Privilege Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in the Android Shell, which can be exploited by remote attackers to build special applications, induce application parsing, and elevate privileges...
SUSE-SU-2016:1614-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2016-5118: popen shell vulnerability via special filenames bnc982178. - CVE-2013-4589: The ExportAlphaQuantumType function in export.c in GraphicsMagick might have allowed remote attackers to cause a denial of service crash via...
SUSE-SU-2016:1610-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2016-5118: popen shell vulnerability via filenames bsc982178...
[slackware-security] imagemagick
New imagemagick packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/imagemagick-6.8.610-i486-3slack14.1.txz: Rebuilt. Removed popen support to prevent another shell vulnerability. This issu...
MVPower CCTV Cameras 漏洞
漏洞演示 默认的Web管理接口登录账号 通过默认的帐号admin和空密码能够通过Web管理接口成功登录： 登录后，可以进行实时的图像监控，系统设置等： Web管理接口登录绕过 根据原文描述，Web管理接口登录的认证仅仅是在前端（js/cookie.js）验证了请求Cookie中是否存在“dvrcamcnt”、”dvruser”、”dvrpwd”这三个值： 通过直接在请求中设置对应Cookie值即可正常访问控制后台： 其中dvrcamcnt指的是页面上实时监控画面的数量。 内置未授权访问Shell...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the openssh-3.1p1 package of the Red Hat Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
ElasticSearch Unauthenticated Remote Code Execution Exploit
Exploit for linux platform in category remote exploits !/bin/python2 coding: utf-8 Author: Darren Martyn, Xiphos Research Ltd. Version: 20150309.1 Licence: WTFPL - wtfpl.net import json import requests import sys import readline readline.parseandbind'tab: complete' readline.parseandbind'set...
Microsoft Windows Shell SMB LNK Code Execution Exploit
This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload and the trigger, and generates a LNK file which must be...
Patched Windows Machines Exposed to Stuxnet LNK Flaw All Along
A five-year-old Microsoft patch for the .LNK vulnerability exploited by Stuxnet failed to properly protect Windows machines, leaving them exposed to exploits since 2010. Microsoft today is expected to release a security bulletin, MS15-020, patching the vulnerability CVE-2015-0096. It is unknown...
Wave OA the platform there is a common SQL injection(sa permissions)lead Getshell-a vulnerability warning-the black bar safety net
POST /login. aspx HTTP/1.1 Content-Length: 3 4 2 Content-Type: application/x-www-form-urlencoded User-Agent: Googlebot/2.1 +http://www.googlebot.com/bot.html X-Requested-With: XMLHttpRequest Referer: http://124.133.235.142/ Host: 124.133.235.142 Connection: Keep-alive Accept-Encoding:...
Important security fix for bash that allows the injection of commands. (important)
This update fixes a bug in the bash shell that allows an attacker to execute arbitrary commands upon shell invocation if he can control the shell's environment. This is particularly dangerous if the shell is used as a cgi interpreter for a web server, or if the shell handles untrusted input...
The threat is far better than“bleeding heart”for? Abroad new explosion Bash security vulnerability-vulnerability warning-the black bar safety net
These days Linux users can happily play the Red Hat security team yesterday broke a dangerous Bash Shell vulnerability. Its threat may be higher than the earlier disclosure of the“heartbleed”vulnerability is more and more strong! ! A network security company, Engineering Manager Tod Beardsley als...
Upload-Point 1.6 Beta - Upload Shell Vulnerability
No description provided by source. ======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Alger...