CVE-2017-2865

An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability...

CVE-2017-2911

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate...

Unspecified Vulnerability in CloudBees Parameterized Trigger Plugin

CloudBees Parameterized Trigger Plugin is a parameterized trigger plugin in the U.S. CloudBees company's Jenkins Java-based development of continuous integration tools. An unspecified vulnerability exists in the CloudBees Parameterized Trigger Plugin that stems from the program's failure to detec...

Memory Leak Vulnerability in Multiple Huawei Products

The Huawei USG9560, 9520, and 9580 are all USG9500 series firewall appliances from Huawei China. A memory disclosure vulnerability exists in multiple Huawei products. An attacker can exploit the vulnerability by accessing a specific web page on the web device to cause the motherboard to reboot an...

Memory Corruption Vulnerability in Pleasant Book PDF Reader

Yue Book PDF Reader is an e-book reader developed by Shenzhen Ivy Software Technology Co. YueShu PDF Reader suffers from a memory corruption vulnerability when processing PDF files. An attacker can cause the program to crash by constructing some malformed PDF files...

CVE-2017-12106

A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability...

CVE-2017-1000089

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

CVE-2017-1000084

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

Authentication flaw

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

CVE-2017-1000084: Incorrect Default Permissions

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

CVE-2017-1000086

Summary: Multiple sources report a vulnerability in the Jenkins Periodic Backup Plugin (CVE-2017-1000086) involving missing permission checks and CSRF exposure. Affected component: Jenkins Periodic Backup Plugin (version 1.4 and earlier, per CNVD/CVE references). Root cause (as stated): The plugi...

CVE-2017-1000084

CVE-2017-1000084 concerns the Jenkins Parameterized Trigger Plugin, where the component failed to enforce Item/Build permissions during downstream triggering. The underlying issue allowed a build to trigger other projects without proper authorization, potentially enabling unauthorized project lau...

CVE-2017-1000084

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

PT-2017-13307

Name of the Vulnerable Software and Affected Versions MongoDB libbson version 1.7.0 Description The issue arises from a miscalculation in the bson iter codewscope function, which leads to a denial of service due to a heap-based buffer over-read in the bson utf8 validate function. This can be...

jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433)

The jenkins-plugin-pipeline-build-step fails to check permissions correctly allowing attackers with access to it to specify the triggering of any other project in Jenkins. This potentially gives an attacker access to projects they should not have access to...

Cross-site Scripting Vulnerability in Qibo CMS Frontend

Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. A cross-site scripting vulnerability exists in the front-end of Qibo CMS, where an attacker can construct...

UBUNTU-CVE-2017-2862

An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability...

Dup Scout Enterprise 9.9.14 - Input Directory Local Buffer Overflow

Dup Scout Enterprise 9.9.14 - Input Directory Local Buffer Overflow !/usr/bin/python Exploit Title : Dup Scout Enterprise v9.9.14 - 'Input Directory' Local Buffer Overflow Date : 04 Sept, 2017 Exploit Author : Touhid M.Shaikh - www.touhidshaikh.com Contact : https://github.com/touhidshaikh Vendor...

Huawei Cell Phone Write Arbitrary Memory Vulnerability

Huawei P10 and P10 Plus are both smartphone products from Chinese company Huawei Huawei. A write-anywhere memory vulnerability exists in the Bootloader of the Huawei P10 and P10 Plus due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the us...

OrientDB 2.2.x Remote Code Execution

This module leverages a privilege escalation on OrientDB to execute unsandboxed OS commands. All versions from 2.2.2 up to 2.2.22 should be vulnerable. Module Options msf use exploit/multi/http/orientdb/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedex...