Ryan Emmons

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file, potentially resulting in a reboot to factory default settings. The issue also allows low-privileged users to escalate to admin/root and execute remote code.

An improper encoding or escaping of output issue exists in the system plugin daemon. This flaw allows unauthenticated remote attackers to execute arbitrary code via unspecified vectors. Technical analysis indicates that user-controlled data can affect the environment passed to privileged plugin processes, enabling command execution. In real-world incidents, this has been exploited to deploy C3RB3R ransomware, which encrypts files with a `.L0CK3D` extension and leaves `read-me3.txt` ransom notes. Exploitation involves sending a crafted request to the `/webapi/entry.cgi` endpoint using the `account` parameter to inject environment variables such as `LD PRELOAD` and `LD DEBUG OUTPUT` to trigger the execution of a remote shell script.

The issue is a Direct Request ('Forced Browsing') vulnerability in Apache OFBiz, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers. This vulnerability has been actively exploited by hackers, with over 25,000 requests targeting 4,000 unique sites detected by Imperva. The vulnerability allows for unauthenticated remote code execution.

The issue is related to insufficient input validation in Wowza Streaming Engine, which can be exploited by a remote attacker to execute arbitrary code. An authenticated Streaming Engine Manager administrator can define a custom application property and poison a stream target for high-privilege remote code execution. The vulnerability exposes thousands of servers to attack.

The issue is related to Stored Cross-Site Scripting in the Manager component, which allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard. This can lead to the automatic hijacking of admin accounts. The vulnerability is associated with a lack of protection for the web page structure, enabling a remote attacker to conduct a cross-site scripting (XSS) attack.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to create an XML definition file anywhere on the file system. The vulnerability is due to incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to gain access to create an XML file in an arbitrary directory.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to read any file on the file system if the target directory contains an XML definition file. The vulnerability is caused by incorrect restriction of the path name to a directory with limited access. Exploitation of the vulnerability may allow a remote attacker to gain read access to files.

The issue is related to a path traversal vulnerability in the Manager component of Wowza Streaming Engine. This vulnerability allows an administrator user to delete any directory on the file system if the target directory contains an XML definition file. The vulnerability is associated with incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to gain access to delete directories.

The issue is related to errors in the representation of information by the user interface in Microsoft Office for Mac. It may allow a remote attacker to conduct spoofing attacks.

The issue is related to errors in handling input data in the Object Attribute Handler component of the CrushFTP cross-platform FTP server. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending specially crafted requests containing AS2 headers. The vulnerability is associated with improper handling of AS2 headers in CrushFTP, allowing an attacker to gain control over user information Java Properties, set arbitrary permissions for reading and deleting files, and potentially lead to system compromise and remote code execution at the root level. It is estimated that thousands of organizations are threatened by this issue, with about 46,088 results mainly distributed in the United States, Germany, and other countries.

The Ericom PowerTerm WebConnect login portal can unsafely write an XSS payload from the `AppPortal` cookie into the page. This issue allows for potential cross-site scripting attacks.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an attacker to gain full control over the application. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, resulting in the takeover of Oracle VM VirtualBox. It is noted that this vulnerability does not apply to Windows systems.