The vulnerabilities of the FortiOS command-line interpreter, the FortiSwitchManager local management platform, and the FortiProxy proxy server for protecting against internet attacks allow attackers to execute arbitrary code.

The vulnerability of the FortiOS command-line interpreter, the local management platform FortiSwitchManager, and the FortiProxy proxy server for protecting against Internet attacks is related to the use of uncontrolled format strings in processing binary files. Exploiting this vulnerability allow...

CyberPower Power Device Network Utility Missing Authentication (CVE-2024-32735)

Binary data cyberpowerpdnucve-2024-32735.nbin...

CVE-2023-46842

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a...

Apache Superset Web Interface Detection

Binary data apachesupersetwebdetect.nbin...

WhatsApp Desktop Installed (Windows)

Binary data whatsappdesktopwininstalled.nbin...

Fortra FileCatalyst Workflow Path Traversal (CVE-2024-25153)

Binary data fortrafilecatalystworkflowcve-2024-25153.nbin...

Yealink Device Management Platform Pre-authentication Remote Command Injection (CVE-2021-27561)

Binary data yealinkdevicemanagementplatformCVE-2021-27561.nbin...

Fortra FileCatalyst Workflow Detection

Binary data fortrafilecatalystworkflowdetect.nbin...

Yealink Device Management Platform Web Interface Detection

Binary data yealinkdevicemanagementplatformwebdetect.nbin...

EulerOS Virtualization 2.11.1 : shim (EulerOS-SA-2024-1619)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HT...

EulerOS Virtualization 2.11.0 : shim (EulerOS-SA-2024-1638)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTT...

CVE-2024-32352

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary...

CVE-2024-32349

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary...

CVE-2024-32350

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary...

CVE-2024-32351

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "mru" parameter in the "cstecgi.cgi" binary...

CVE-2024-32349

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary...

UBUNTU-CVE-2024-3374

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions...

CVE-2024-32352

The CVE-2024-32352 entry concerns TOTOLINK X5000R firmware 9.1.0cu.2350_B20230313. A authenticated remote command execution vulnerability exists in the ipsecL2tpEnable parameter of the cstecgi.cgi binary. Affected component: cstecgi.cgi handling for ipsecL2tpEnable. Impact as described: authentic...

CVE-2024-32350

TOTOLINK X5000R is affected. Version 9.1.0cu.2350_B20230313 contains an authenticated remote command execution (RCE) vulnerability in the cstecgi.cgi binary via the ipsecPsk parameter. Root cause: improper handling/filtering of input leading to arbitrary code execution. Impact: authenticated netw...

CVE-2024-32349

TOTOLINK X5000R firmware version 9.1.0cu.2350_B20230313 contains an authenticated remote command execution vulnerability via the mtu parameter in the cstecgi.cgi binary. The issue stems from insufficient filtering of special elements in the constructed snippet, enabling arbitrary code execution b...