Lucene search
+L

3257 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/05/08 5:31 a.m.•11 views

Malicious code in ping-bot-reduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 605a96bff0b39813fe902ed7de4bfe3bf228835641c9d030cbec0a2a8b4f676b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/05/08 5:31 a.m.•2 views

Malware in reduction-ping

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/05/08 5:31 a.m.•15 views

MAL-2024-1347 Malicious code in ping-bot-reduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 605a96bff0b39813fe902ed7de4bfe3bf228835641c9d030cbec0a2a8b4f676b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSV
OSV
•added 2024/05/03 5:15 p.m.•16 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS6AI score0.00313EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/03 5:15 p.m.•36 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS7.4AI score0.00313EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/05/03 2:15 a.m.•11 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS8.1AI score0.03836EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/03 2:15 a.m.•17 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS6.3AI score0.03836EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 2:15 a.m.•57 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9.3AI score0.03836EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/03 1:59 a.m.•31 views

CVE-2023-38120 Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9AI score0.03836EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/03 12:00 a.m.•19 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.7AI score0.00313EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•7 views

CVE-2023-38120: Improper Neutralization of Special Elements used in an OS Command

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS6.8AI score0.03836EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•42 views

Adtran SR400ac 安全漏洞

The Adtran SR400ac is a router from the US-based Adtran Corporation. A security vulnerability exists in the Adtran SR400ac that stems from the presence of a ping command injection remote code execution vulnerability, which can be exploited by an attacker to execute code in a root context...

8.8CVSS9.3AI score0.03836EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/03 12:00 a.m.•49 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.6AI score0.00313EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•9 views

CVE-2024-33793: Improper Neutralization of Special Elements used in an OS Command

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS6.3AI score0.00313EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/03 12:00 a.m.•98 views

CVE-2024-33793

The netis-systems MEX605 wireless device, specifically version v2.00.06 , is vulnerable to arbitrary OS command execution . An attacker can achieve this by sending a crafted payload to the device's ping test page . This vulnerability is characterized as an improper neutralization of special eleme...

5.3CVSS7.7AI score0.00313EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/03 12:00 a.m.•19 views

PT-2024-25484 · Netis Systems · Netis-Systems Mex605

Name of the Vulnerable Software and Affected Versions: netis-systems MEX605 version 2.00.06 Description: The issue allows attackers to execute arbitrary OS commands via a crafted payload to the "ping test page". Recommendations: For netis-systems MEX605 version 2.00.06, consider restricting acces...

5.3CVSS7.8AI score0.00313EPSS
SaveExploits1References5
Mend
Mend
•added 2024/05/01 10:45 a.m.•5 views

CVE-2024-32984

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pending frames. This vector is not bounded in length. Every time the Yamux protocol requires sending of a new frame, this frame gets appended ...

8.7CVSS0.00761EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•23 views

WordPress Plugin Import WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS8.7AI score0.00568EPSS
SaveExploits2References2
OSV
OSV
•added 2024/04/19 4:15 a.m.•14 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS5.8AI score0.00756EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 4:15 a.m.•50 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS8.3AI score0.00756EPSS
SaveExploits0References1
Rows per page
Query Builder