Code Execution – Computer Security Articles

Vulnerability Summary The following advisory describe arbitrary Python code execution found in Odoo CRM version 10.0 Odoo is a suite of open source business apps that cover all your company needs: CRM, eCommerce, accounting, inventory, point of sale, project management, etc. Odoo’s unique value proposition is to be at the same time very easy to … Continue reading SSD Advisory – Odoo CRM Code Execution

Independent Securiteam

SSD Advisory – ManageEngine Code Execution

June 16, 2017 admin Code Execution, SecuriTeam Secure Disclosure, Unrestricted File Upload

Credit to Author: SSD / Maor Schwartz| Date: Fri, 16 Jun 2017 18:46:58 +0000

Vulnerability Summary The following advisory describes Unrestricted File Upload vulnerability that leads to Code Execution found in ManageEngine Firewall Analyzer and ManageEngine OpManager. ManageEngine Firewall Analyzer is a browser-based firewall/VPN/proxy server reporting solution that uses a built-in syslog server to store, analyze, and report on these logs. Firewall Analyzer provides daily, weekly, monthly, and yearly … Continue reading SSD Advisory – ManageEngine Code Execution

Independent Securiteam

SSD Advisory – Sentora Web Hosting Control Panel Multiple Vulnerabilities

April 11, 2017 admin Code Execution, Privilege Escalation, SecuriTeam Secure Disclosure

Credit to Author: noam| Date: Tue, 11 Apr 2017 10:23:24 +0000

Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in Sentora Web Hosting Control Panel that lead to remote code execution. Sentora is a free to download and use web hosting control panel developed for Linux, UNIX and BSD based servers or computers. The Sentora software can turn a domestic or commercial server into … Continue reading SSD Advisory – Sentora Web Hosting Control Panel Multiple Vulnerabilities

Independent Securiteam

SSD Advisory – Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities

April 9, 2017 admin Code Execution, Remote Code Execution, SecuriTeam Secure Disclosure

Credit to Author: Maor Schwartz| Date: Sun, 09 Apr 2017 10:28:46 +0000

Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in Horde Groupware Webmail. Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks, notes, files, and bookmarks with the standards compliant components from the Horde Project. … Continue reading SSD Advisory – Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities