PT-2019-20056

Name of the Vulnerable Software and Affected Versions loopback-connector-mongodb versions prior to 3.6.0 Description The issue arises from the MongoDB Connector for LoopBack failing to properly sanitize a filter passed to query the database, allowing the dangerous $where property to be passed to...

CVE-2014-5435: Write-what-where Condition

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Introduction Sophos patched two vulnerabilities in Sophos HitmanPro.Alert in version 3.7.9.759. We publicly disclosed these issues last week here, Cisco Talos will show you the process of developing an exploit for one of these bugs. We wil...

CVE-2018-3971: Write-what-where Condition

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP...

GHSA-XM6R-4466-MR74 OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...

CVE-2018-15376: Write-what-where Condition

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerability is due to the...

CVE-2018-15375: Write-what-where Condition

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerability is due to the...

Sql injection

In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request...

CVE-2018-17566: Improper Neutralization of Special Elements used in an SQL Command

In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request...

CVE-2018-16962: Write-what-where Condition

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...

CVE-2018-10597

IntelliVue Patient Monitors MP Series including MP2/X2/MP30/MP50/MP70/NP90/MX700/800 Rev B-M, IntelliVue Patient Monitors MX MX400-550 Rev J-M and X3/MX100 for Rev M only, and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that...

PT-2018-9988

Name of the Vulnerable Software and Affected Versions: IntelliVue Patient Monitors MP Series versions Rev B-M IntelliVue Patient Monitors MX versions Rev J-M Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0, J.3 IntelliVue Patient Monitors X3/MX100 version Rev M...

CVE-2018-10597: Improper Authentication

IntelliVue Patient Monitors MP Series including MP2/X2/MP30/MP50/MP70/NP90/MX700/800 Rev B-M, IntelliVue Patient Monitors MX MX400-550 Rev J-M and X3/MX100 for Rev M only, and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that...

PT-2018-4731

Name of the Vulnerable Software and Affected Versions sequelize versions 2.1.3 and earlier Description The issue concerns SQL injection when user input is passed into certain functions or statements, such as findOne or where: "user input". This allows for potential SQL injection attacks...

Eve Arbitrary Code Execution Vulnerability

Eve pyeve is a Python based open source REST API framework. A security vulnerability exists in the io/mongo/parser.py file in Eve versions prior to 0.7.5. A remote attacker can exploit the vulnerability to execute arbitrary code with the help of the 'where' parameter...

PYSEC-2018-8

io/mongo/parser.py in Eve aka pyeve before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter...

CVE-2018-8097

io/mongo/parser.py in Eve aka pyeve before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter...

CVE-2018-8097

CVE-2018-8097 affects Eve (aka pyeve) prior to 0.7.5. The vulnerability resides in io/mongo/parser.py where the where parameter enables Code Injection, allowing remote execution of arbitrary code. Multiple sources corroborate remote-code-execution via this parameter. A PoC/notice exists showing f...

PT-2018-18428

Name of the Vulnerable Software and Affected Versions: Eve aka pyeve versions prior to 0.7.5 Description: The issue allows remote attackers to execute arbitrary code via Code Injection in the where parameter. This is related to the io/mongo/parser.py file in Eve. Recommendations: For versions pri...

CVE-2018-8097: Improper Control of Generation of Code

io/mongo/parser.py in Eve aka pyeve before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter...