Apache HTTP Server version 2.4.50 remote code execution exploit.
00e3007a5d132ef7e927cc763523a813Apple Security Advisory 2021-10-11-1 - iOS 15.0.2 and iPadOS 15.0.2 address a code execution vulnerability.
9e6f048f643366aae176a51313727967Backdoor.Win32.LanFiltrator.11.b malware suffers from a code execution vulnerability.
c299aaca4f851fae1930c8e5f36d3dbdApache HTTP Server version 2.4.50 suffers from path traversal and code execution vulnerabilities.
83e881b06b8c45b03c0e1280bba0e9dfMoodle versions 3.9, 3.8 to 3.8.3, 3.7 to 3.7.6, 3.5 to 3.5.12, and earlier unsupported versions allow for a teacher to exploit chain to remote code execution. A bug in the privileges system allows a teacher to add themselves as a manager to their own class. They can then add any other users, and thus look to add someone with manager privileges on the system (not just the class). After adding a system manager, a loginas feature is used to access their account. Next the system is reconfigured to allow for all users to install an addon/plugin. Then a malicious theme is uploaded and creates an RCE. If all of that is a success, we revert permissions for managers to system default and remove our malicious theme. Manual cleanup to remove students from the class is required. This Metasploit module was tested against Moodle version 3.9.
ebc3a909ac2dea6048c783034195cd70Maian-Cart version 3.8 unauthenticated remote code execution exploit.
8d98805ee6c43d397382d4e44c8b3d0cGoogle SLO-Generator versions 2.0.0 and below suffer from a code execution vulnerability.
7501ed60c77636b8e341c9d98a19821fMicrosoft Office OneNote 2007 proof of concept exploit for a OnePKG file parsing remote code execution vulnerability. Upon decompressing files from .ONEPKG archives (using MS CAB format), a failure to sanitize file paths and file contents allows for arbitrary file planting in arbitrary locations on the OS, including the startup folder.
66b82cd487db6f570ee8d45f756cf2caOpen Game Panel suffers from an authenticated remote code execution vulnerability.
4a44064f3593b04c3c02e8b2d071ef52Cmsimple version 5.4 authenticated remote code execution exploit.
46792c26a9315734cd7d64fb53dadde5CMS Made Simple version 2.1.3 details on how to achieve remote code execution.
1d05bbd0a0739e3bf334b6bce440369cBackdoor.Win32.Hupigon.afjk malware suffers from bypass and code execution vulnerabilities.
5b6de1178afe2ed5b2303cbea0cbbf1dApple Security Advisory 2021-09-23-2 - Security Update 2021-006 Catalina addresses a code execution vulnerability.
da2fbee1b8de7e4786058168460ba81dRed Hat Security Advisory 2021-3660-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.1 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.0 and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.1 Release Notes for information about the most significant bug fixes and enhancements included in this release. Issues addressed include code execution, cross site scripting, denial of service, and traversal vulnerabilities.
d1b890023c5f704258c5a41a08dd47ebApple Security Advisory 2021-09-23-1 - iOS 12.5.5 addresses code execution, integer overflow, and use-after-free vulnerabilities.
488d3765baad8c4d50fbe4155e799a1bRed Hat Security Advisory 2021-3658-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.1 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.0 and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.1 Release Notes for information about the most significant bug fixes and enhancements included in this release. Issues addressed include code execution, cross site scripting, denial of service, and traversal vulnerabilities.
9f3015b7fb5759e48aa377a1f59a17bfRed Hat Security Advisory 2021-3656-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.1 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.0 and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.1 Release Notes for information about the most significant bug fixes and enhancements included in this release. Issues addressed include code execution, cross site scripting, denial of service, and traversal vulnerabilities.
d4e532af434c0ddf0cb26799953b9da2Ubuntu Security Notice 5087-1 - A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
847a422a36d646b7e940f861813e77ebApple Security Advisory 2021-09-20-10 - iTunes 12.12 for Windows addresses code execution vulnerabilities.
3e98754bf5c98c2816704d7db807c3a3Apple Security Advisory 2021-09-20-9 - iTunes U 3.8.3 addresses a code execution vulnerability.
b21fc0fab347da30ebec7c87958382e7Apple Security Advisory 2021-09-20-8 - Security Update 2021-005 Catalina addresses buffer overflow, bypass, code execution, denial of service, integer overflow, and out of bounds read vulnerabilities.
2687d56c42a8927b7635267a708d17b5Apple Security Advisory 2021-09-20-7 - macOS Big Sur 11.6 addresses buffer overflow, bypass, code execution, denial of service, integer overflow, out of bounds read, and use-after-free vulnerabilities.
13241e7baa233f6d334b704ccc309bb8Apple Security Advisory 2021-09-20-6 - iOS 14.8 and iPadOS 14.8 addresses code execution, denial of service, integer overflow, and use-after-free vulnerabilities.
d0b20d27dd698353f67f5b99c5b4f169Apple Security Advisory 2021-09-20-5 - Safari 15 addresses code execution vulnerabilities.
93a4864c5af01735024cc4bbeec0c113Sentry version 8.2.0 suffers from a remote code execution vulnerability.
7ab59d06aee52c87e42e7da434c4a24b
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed