Ryan Emmons

تسمح ثغرة أمنية في SMA100 لمهاجم بعيد تمت مصادقته بامتيازات مستخدم SSLVPN بالتحايل على عمليات التحقق من مسار المرور وحذف ملف عشوائي، مما قد يؤدي إلى إعادة التهيئة إلى الإعدادات الافتراضية للمصنع. كما تسمح هذه الثغرة للمستخدمين ذوي الامتيازات المنخفضة بالارتقاء إلى مستوى admin/root وتنفيذ التعليمات البرمجية عن بُعد.

توجد ثغرة تتعلق بترميز أو هروب غير صحيح للمخرجات في برنامج تشغيل المكونات الإضافية للنظام (system plugin daemon). تسمح هذه الثغرة للمهاجمين عن بُعد وغير المصرح لهم بتنفيذ تعليمات برمجية عشوائية عبر ناقلات غير محددة. تشير التحليلات الفنية إلى أن البيانات التي يتحكم فيها المستخدم يمكن أن تؤثر على البيئة الممررة إلى عمليات المكونات الإضافية ذات الامتيازات، مما يسمح بتنفيذ الأوامر. في حوادث واقعية، تم استغلال ذلك لنشر برمجية الفدية C3RB3R، التي تقوم بتشفير الملفات بامتداد `.L0CK3D` وتترك ملاحظات فدية باسم `read-me3.txt`. يتضمن الاستغلال إرسال طلب مصمم خصيصاً إلى نقطة النهاية `/webapi/entry.cgi` باستخدام المعلمة `account` لحقن متغيرات البيئة مثل `LD PRELOAD` و `LD DEBUG OUTPUT` لتفعيل تنفيذ نص برمجي (shell script) عن بُعد.

The issue is a Direct Request ('Forced Browsing') vulnerability in Apache OFBiz, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers. This vulnerability has been actively exploited by hackers, with over 25,000 requests targeting 4,000 unique sites detected by Imperva. The vulnerability allows for unauthenticated remote code execution.

The issue is related to insufficient input validation in Wowza Streaming Engine, which can be exploited by a remote attacker to execute arbitrary code. An authenticated Streaming Engine Manager administrator can define a custom application property and poison a stream target for high-privilege remote code execution. The vulnerability exposes thousands of servers to attack.

The issue is related to Stored Cross-Site Scripting in the Manager component, which allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard. This can lead to the automatic hijacking of admin accounts. The vulnerability is associated with a lack of protection for the web page structure, enabling a remote attacker to conduct a cross-site scripting (XSS) attack.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to create an XML definition file anywhere on the file system. The vulnerability is due to incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to gain access to create an XML file in an arbitrary directory.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to read any file on the file system if the target directory contains an XML definition file. The vulnerability is caused by incorrect restriction of the path name to a directory with limited access. Exploitation of the vulnerability may allow a remote attacker to gain read access to files.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to delete any directory on the file system if the target directory contains an XML definition file. The vulnerability is associated with incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to gain access to delete directories.

The issue is related to errors in the representation of information by the user interface in Microsoft Office for Mac. It may allow a remote attacker to conduct spoofing attacks.

The issue is related to errors in handling input data in the Object Attribute Handler component of the CrushFTP cross-platform FTP server. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending specially crafted requests containing AS2 headers. The vulnerability is associated with improper handling of AS2 headers in CrushFTP, allowing an attacker to gain control over user information Java Properties, set arbitrary permissions for reading and deleting files, and potentially lead to system compromise and remote code execution at the root level. It is estimated that thousands of organizations are threatened by this issue, with about 46,088 results mainly distributed in the United States, Germany, and other countries.

The Ericom PowerTerm WebConnect login portal can unsafely write an XSS payload from the `AppPortal` cookie into the page. This issue allows for potential cross-site scripting attacks.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an attacker to gain full control over the application. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, resulting in the takeover of Oracle VM VirtualBox. It is noted that this vulnerability does not apply to Windows systems.