Nicolas Gregoire

Name of the Vulnerable Software and Affected Versions: Ektron Content Management System (CMS) versions prior to 8.02 SP5 Description: The issue allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data, due to the use of the XslCompiledTransform class with enablescript set to true. Recommendations: For versions prior to 8.02 SP5, update to version 8.02 SP5 or later to resolve the issue. As a temporary workaround, consider disabling the use of the XslCompiledTransform class with enablescript set to true until a patch is available. Restrict access to XSL data to minimize the risk of exploitation.

The issue is related to an XML external entity (XXE) vulnerability in the SVG to PNG and JPG conversion classes. This allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file. There is also a mention of a similar issue in Schneider Electric EcoStruxure Data Center Expert, related to XML External Entity Processing Information Disclosure.

The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter of the 'lhn/public/network/ping' endpoint.

The issue concerns a hardcoded password in hydra.exe for the global$agent account. This hardcoded password is L0CAlu53R, allowing remote attackers to gain access to a management service. The attack vector involves sending a login request to TCP port 13838.

The issue is related to the XSL implementation, allowing remote attackers to cause a denial of service through unspecified vectors, resulting in an incorrect read operation.

A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Excel spreadsheet, related to improper validation of record information. This issue can lead to memory corruption. A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files, allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with a "next extension offset" that references the current extension or a previous one.

The issue allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www, which is a cross-site scripting (XSS) vulnerability.

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 2.6.0-pl2 and prior to 2.6.1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters when external transformations are enabled. Recommendations: For versions 2.6.0-pl2 and prior to 2.6.1, update to version 2.6.1 or later to resolve the issue. As a temporary workaround, consider disabling external transformations until a patch is available.

The issue is related to improper libxslt security settings in WebKit, allowing remote attackers to create arbitrary files and execute arbitrary code via a crafted web site. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.