The vulnerability of the OnCommand Workflow Automation data storage automation tool allows a hacker to execute arbitrary code.

The OnCommand Workflow Automation tool installer installs the JDWP service Java Debugging Wire Protocol. This service allows a remote attacker to execute arbitrary code through an unspecified vector...

Oracle Linux 7 : abrt (ELSA-2015-1083)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1083 advisory. abrt 2.1.11-22.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-22 - do not open the buildids file as the user abrt - do not...

abrt security update

abrt 2.1.11-22.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-22 - do not open the buildids file as the user abrt - do not unlink failed and big user core files - Related: 1212819, 1216973 2.1.11-21 - validate all D-Bus method arguments - Related: 1214610 2.1.11-20 -...

NetApp OnCommand Workflow Automation Remote Code Execution Vulnerability

NetApp OnCommand Workflow Automation is a suite of automated execution storage process management software from the U.S. company NetApp. The software provides storage configuration, storage cloning and other functions for the database or file system. A security vulnerability exists in the NetApp...

CVE-2015-3292

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-3292

NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 installs the Java Debug Wire Protocol (JDWP) service via the installer, enabling remote code execution by an attacker through unspecified vectors. This vulnerability is corroborated across multiple sources (NVD entry CVE-201...

CVE-2015-3292

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

Multi Purpose Fuzzer: zzuf

Multi Purpose Fuzzer zzuf is a transparent application input fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data which more than often comes from untrusted sources on the Internet. It works by intercepting file and network operations and changing random...

IBM Workflow for Bluemix Information Disclosure Vulnerability

IBM Bluemix is a suite of cloud platforms for building, running and managing applications and services. An information disclosure vulnerability exists in IBM Workflow for Bluemix, which allows attackers to exploit the vulnerability to obtain sensitive information...

HP Capture and Route Software Remote Information Disclosure Vulnerability

HP Capture and Route Software is one of the HP JetAdvantage Workflow Solution to effectively manage, update, and store information. A remote information disclosure vulnerability exists in HP Capture and Route Software. This vulnerability could be exploited by an authenticated, remote attacker to...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action has multiple reflected cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script processing attachment-macro has a cross-site scripting vulnerability that can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.actio has multiple cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. The Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script handles a cross-site scripting vulnerability in workflowMarkup that can be exploited by a remote attacker to construct a malicious URI, which induces the user to parse it,...

WordPress Work The Flow 2.5.2 Shell Upload

Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-14 Tested on : Linux BackBox 4.0 / curl 7.35.0 Description: Work the Flow...

通达OA2013集团版SQL注入+root

简要描述： dd 详细说明： http://www.tongda2000.com/oa/group/ 试用登录 http://www.day900.com/ 注入点：...

724CMS 5.01 / 4.59 / 4.01 / 3.01 SQL Injection

724CMS 5.01 Multiple SQL Injection Security Vulnerabilities Exploit Title: 724CMS Multiple SQL Injection Security Vulnerabilities Vendor: 724CMS Product: 724CMS Vulnerable Versions: 3.01 4.01 4.59 5.01 Tested Version: 5.01 Advisory Publication: March 14, 2015 Latest Update: March 14, 2015...

hanweb /xxgk/workflow/objectbox/selectx_search.jsp SQL注入漏洞

No description provided by source...

Oracle GENERATESCHEMA Buffer Overflow Exploit

This Exploit a buffer overflow in Oracle10g. When sending a specially formatted query to the GENERATESCHEMA function in the XDB.DBMSXMLSCHEMA package, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 0 then rexploit with target 1. Th...

PHP file include vulnerability analysis-vulnerability warning-the black bar safety net

One, What is”remote file inclusion vulnerability”for? The answer is: the server through the php properties of a function to contain any files, since you want to include this file source filter is not strict, so can go to that contains a malicious file and we can construct the malicious file to...

SA-CONTRIB-2014-021 - Maestro - Cross Site Scripting (XSS)

The Maestro module enables you to create complex workflows, automating business processes. The module doesn't sufficiently filter Role or Organic Group names when displaying them in the workflow details. This vulnerability is mitigated by the fact that an attacker must have a role with the...