CVE-2020-7620

CVE-2020-7620 affects pomelo-monitor up to version 0.3.7. The vulnerability allows command injection through parameters passed to pomelo-monitor, enabling an attacker to execute arbitrary commands. CVSS data indicate a NETWORK, low complexity, no authentication, with high confidentiality, integri...

CVE-2020-7620

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

PT-2020-19658

Name of the Vulnerable Software and Affected Versions pomelo-monitor versions prior to 0.3.8 Description The issue allows for Command Injection, enabling the injection of arbitrary commands as part of pomelo-monitor params. Recommendations For versions prior to 0.3.8, update to version 0.3.8 or...

CVE-2020-7620: Improper Neutralization of Special Elements used in an OS Command

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

PRTG Network Monitor < 20.1.57.1745 RCE Vulnerability

PRTG Network Monitor is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Paessler PRTG Network Monitor webserver component input validation error vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A security vulnerability exists in the webserver component of Paessler PRTG Network Monitor version 19.2.50 through PRTG version 20.1.56. A remote attacker could exploit the...

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

CVE-2020-10374

The CVE-2020-10374 affects Paessler PRTG Network Monitor (webserver component) from version 19.2.50 up to 20.1.56, enabling unauthenticated remote command execution via a crafted POST request or via the what parameter of the Contact Support form’s screenshot function. This is a remote, network-ac...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-4276)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

PT-2020-12045

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions 19.2.50 through 20.1.56 Description The issue allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

CVE-2020-10374: Improper Input Validation

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

Moo0 System Monitor Code Execution Vulnerability

Moo0 System Monitor is a suite of computer resource and performance monitoring programs. A security vulnerability exists in the WinRing0x64.sys file in Moo0 System Monitor version 1.83. The vulnerability can be exploited to execute Ring-0 code and elevate privileges with a specially crafted reque...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7240

CVE-2019-7240 involves Moo0 System Monitor 1.83, where the WinRing0x64.sys driver exposes a wrmsr capability via IOCTL 0x9C402088 and does not properly filter MSRs. This allows arbitrary MSR writes, enabling Ring-0 code execution and privilege escalation. Multiple connected sources (NVD, Red Hat,...

PT-2020-11235

Name of the Vulnerable Software and Affected Versions Moo0 System Monitor version 1.83 Description An issue was discovered in the WinRing0x64.sys driver, which exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. This allows arbitrary MSR...

CVE-2019-7240: Improper Initialization

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...