Showing 1 - 6 of 6

Files from G. Geshev

First Active	2014-11-08
Last Active	2017-04-26

LightDM (Ubuntu 16.04/16.10) Privilege Escalation: Posted Apr 26, 2017; Authored by G. Geshev; This advisory describes a local privilege escalation via guest-account in LightDM found in Ubuntu versions 16.10 / 16.04 LTS.; tags | exploit, local; systems | linux, ubuntu; advisories | CVE-2017-7358; SHA-256 | 7eb1528e323459cf945e526fa778e82b210bbab5581e8b3874acbbb6985be89b; Download | Favorite | View

Apache Cassandra Remote Code Execution: Posted Apr 1, 2015; Authored by G. Geshev; Under its default configuration, Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. As RMI is an API for the transport and remote execution of serialized Java, anyone with access to this interface can execute arbitrary code as the running user. Versions 1.2.0 to 1.2.19, 2.0.0 to 2.0.13, and 2.1.0 to 2.1.3 are affected.; tags | advisory, java, remote, arbitrary; advisories | CVE-2015-0225; SHA-256 | d79a592a24e0f1d275de2bef522ee3e10d9c60eb83bb3d79b0647c9167894d02; Download | Favorite | View

Apache Qpid 0.30 Anonymous Action Prevention: Posted Jan 26, 2015; Authored by G. Geshev; Apache Qpid's qpidd up to and including version 0.30 has an issue where an attacker can gain access to qpidd as an anonymous user, even if the ANONYMOUS mechanism is disallowed.; tags | advisory; advisories | CVE-2015-0223; SHA-256 | 06645715d84f1fc35ec6374bda9612d9d7e7cfe32c43f771345163d665548962; Download | Favorite | View

Apache Qpid 0.30 Crash: Posted Jan 26, 2015; Authored by G. Geshev; Apache Qpid's qpidd up to and including version 0.30 has an issue where certain unexpected protocol sequences cause the broker process to crash due to insufficient checking, but that authentication could be used to restrict the exploitation of this vulnerability.; tags | advisory, denial of service, protocol; advisories | CVE-2015-0224; SHA-256 | 8993e8ca3a940ec6ab2ae983a86c4b9b0e15985ffbd0a9791e196337735cb1e6; Download | Favorite | View

Apache Qpid 0.30 Denial Of Service: Posted Jan 14, 2015; Authored by G. Geshev; Apache Qpid's qpidd up to and including version 0.30 suffers from a denial of service vulnerability.; tags | advisory, denial of service; advisories | CVE-2015-0203; SHA-256 | 93e08a917a4400984c0daa916d80f064f905d79916e53644c6f039af207a0100; Download | Favorite | View

Apache Qpid 0.30 Induced HTTP Requests: Posted Nov 8, 2014; Authored by G. Geshev; Apache Qpid's qpidd versions 0.30 and below can be induced to make HTTP requests.; tags | advisory, web; advisories | CVE-2014-3629; SHA-256 | 02b8f6b5094a9d7d10965cd7f7bba8617ecef190936e5c0be10efc070b74f3ed; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days