1229 matches found
UBUNTU-CVE-2016-3952
web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/templateexamples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access...
IDAsec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform
IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec Triggering analyzes on Binsec and retrieving results Dependencies protobuf ZMQ capstone for trace disassembly graphviz to dr...
The software vulnerabilities of Cloud Foundry Runtime cf-release, UAA Standalone, and Pivotal Cloud Foundry Elastic Runtime, a software platform of Cloud Foundry, allow attackers to exploit old sessions after password reset.
The vulnerability of the Cloud Foundry Runtime cf-release, UAA Standalone, and Pivotal Cloud Foundry Elastic Runtime software platforms is related to incorrect session expiration times. Exploiting this vulnerability allows a malicious actor to utilize an existing session after password reset, as...
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle WebLogic wls-wsat Component Deserialization RCE', 'Description' = %q The Oracle WebLogic WLS WSAT Component is vulnerable to a XML...
CVE-2017-11398
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...
CVE-2017-14096
A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...
CVE-2017-14095
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system...
CVE-2017-14097
An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...
CVE-2017-14096
A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...
CVE-2017-14095: Improper Control of Filename for Include/Require Statement in PHP Program
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system...
PT-2018-5620
Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A stored cross site scripting XSS issue could allow an attacker to execute a malicious payload on vulnerable systems. Recommendations: For versions 3.2 and...
CVE-2017-11398: Improper Authorization
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...
PT-2018-5325
Name of the Vulnerable Software and Affected Versions Trend Micro Smart Protection Server Standalone versions 3.2 and below Description A session hijacking issue via log disclosure could allow an unauthenticated attacker to hijack active user sessions, enabling them to perform authenticated...
PT-2018-5619
Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system. Recommendations: For versions 3....
PT-2018-5621
Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: An issue exists where improper access control could allow an attacker to decrypt database contents, potentially accessing a vulnerable system. Recommendations:...
CVE-2017-14094: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...
PT-2018-5618
Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system. Recommendations: For versions 3.2...
CVE-2017-14096: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...
CVE-2017-14097: Undefined Security Weakness
An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...
