A vulnerability affecting “/cgi-bin/help/doIt.cgi” in VM Turbo Operations Manager allows directory traversal when the URL encoded POST input “xml_path” was set to “../../../../../../../../../../etc/passwd” we could see the contents of this file.
Multiple stored XSS were found in SpiceWorks system, allowing an attacker to create a SpiceWorks IT ticket with malicious code. Once an admin attempts to login to the system dashboard to view open tickets, the code executes and the attacker could potentially steal the admin's cookies.
A vulnerability has been found in some Skybox View Appliances’ Admin interfaces which would allow a potential malicious party to bypass the authentication mechanism and execute reboot and/or shutdown of appliance self.
A vulnerability has been found in some Skybox View Appliances’ Admin interfaces which would allow a potential malicious party to bypass the authentication mechanism and obtain read-only access to the appliance’s administrative menus. This would allow the malicious party to read system-related information such as interface names, IP addresses and the appliance status.
A buffer overflow is triggered when when passing a long username.
The vulnerability can be classified as 'SQL Injection' from authenticated users. No input validation is performed when processing parameters on the following request: GET /ossim/policy/newpolicyform.php?insertafter='SQLi HTTP/1.1. Although this POC demonstrates READ access to files readable by u=mysql g=root o=all (such as /etc/passwd). It should be noted that, an attacker should be able to WRITE to a new file with sufficient permissions such as /tmp/newfile. After a quick search, exploiting this may be midigated by the current file permissions of /usr/share/*ossim/www/* and other vhosts handled by apache. For those with more time, other writeable locations could be leveraged with this vulnerablity.
Cobbler is a Linux installation server that allows for rapid setup of network installation environments. A Local File Inclusion vulnerability was discovered in Cobbler versions 2.4.x - 2.6.x. An attacker can exploit this vulnerability by logging into the Cobbler WebUI, creating a new profile with a Kickstart value of /etc/passwd, and then viewing the Kickstart value. This will allow the attacker to view the contents of the /etc/passwd file.
Recentl a new fix has been pushed to official python source code repository which fixes a memory corruption vulnerability in python interpreter's strop module. The vulnerability lies in expandtabs() functions. This is due to a missing check in line 626,627 of /Modules/stropmodule.c.
The value of the desc request parameter is copied into the HTML document as plain text between tags. The payload 1c91c<img%20src%3da %20onerror%3dalert(1) >cc245622da6 was submitted in the desc parameter. This input was echoed as 1c91c<img src=a onerror=alert(1) >cc245622da6 in the application's response. This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response. The proof-of-concept attack demonstrated uses an event handler to introduce arbitrary JavaScript into the document.
The folder parameter appears to be vulnerable to SQL injection attacks. The payload 1%3d was submitted in the folder parameter, and a database error message was returned. You should review the contents of the error message, and the application's handling of other input, to confirm whether a vulnerability is present.
Services By CQR