CVE-2017-14100

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The appminivm module has an "externnotify" program configuration option that is executed by the...

CVE-2017-14100

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The appminivm module has an "externnotify" program configuration option that is executed by the...

MGASA-2017-0153 Updated git packages fix security vulnerability

Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help" CVE-2017-8386...

CVE-2017-6079

CVE-2017-6079 affects Edgewater Networks Edgemarc (EdgeMarc) appliances. The HTTP web-management interface exposes a hidden page that allows user-defined commands (such as iptables rules) to be executed via a web shell-like mechanism; the flaw is described as a blind command-injection vulnerabili...

Security Bypass Vulnerability in Multiple D-Link DGS-1510 Websmart Devices

The D-Link DGS-1510-28XMP is an Ethernet switch from AUO D-Link. A full bypass vulnerability exists in multiple D-Link DGS-1510 Websmart devices, which can be exploited by remote attackers to submit a special request for unauthorized command execution...

McAfee VirusScan Enterprise Cross-Site Request Forgery Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A cross-site request forgery vulnerability exists in VirusScan...

Cisco EPC 3928 - Multiple Vulnerabilities

Cisco EPC 3928 - Multiple Vulnerabilities Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

Cisco Prime Network Services Controller Unauthorized Local Command Execution (cisco-sa-20151217-pnsc)(deprecated)

Nessus has dropped device detection of the now EOL Cisco Prime Network Services Controller. This plugin is being deprecated as a result. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/07/05. Deprecated along with dropping SSH library support. include"compat.inc"; if description...

Cisco Wireless Residential Unauthorized Command Vulnerability

A vulnerability with web interface access authentication of the Cisco EPC3928 Wireless Residential Gateway could allow an unauthenticated, remote attacker to issue a subset of commands as the administrator without authenticating to the device. The vulnerability is due to lack of authentication...

GREED 0.81 GRX File List Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...

Windowmaker wmmon 1.0 b2 Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/885/info WMMon is a multiple platform Window Maker docking application. It monitors useful system information such as CPU load and disk activity. The application also allows the user to define commands that can be launche...

Symantec Web Gateway Security Issues

SUMMARY Symantec Web Gateway SWG 5.2 Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console. There is also potential for unauthorized backend database manipulation. AFFECTED...

Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution

Exploit for hardware platform in category web applications The file getAlias.php located in /backupmgt has the following lines: $ipAddress = $GET"ip"; if $ipAddress != "" exec"grep -I $ipAddress $immedLogFile aliasHistory.txt"; .. .. The GET parameter can easily be manipulated to execute commands...

Debian DSA-2478-1 : sudo - parsing error

It was discovered that sudo misparsed network masks used in Host and HostList stanzas. This allowed the execution of commands on hosts, where the user would not be allowed to run the specified command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 2478-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2478-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2012 http://www.debian.org/security/faq -...

HP-UX Update for JRE HPSBUX00141

Check for the Version of JRE OpenVAS Vulnerability Test HP-UX Update for JRE HPSBUX00141 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

GREED 0.81 - .GRX File List Command Execution

GREED 0.81 - .GRX File List Command Execution source: https://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands i...

[Full-Disclosure] Vulnerability in CCBill script

Recently there are many hacking attempts attacking E-commerce site that use CCBILL to precess credit cards. Some of my clients sites are hacked and defaced by this vulnerability. In the Incidents List, some people already mention about it. I just take a look at the actual problem and figure out...

XMMS Remote input validation error

Overview There is an input validation error in the stand-alone SOAP server XMMS Remote which allows unauthorized remote command execution. Description XMMS Remote is a stand-alone XML/SOAP HTTP server implemented in PERL created by X2 Studios. It is used to monitor a running xmms media player...