EulerOS Virtualization 3.0.2.2 : cronie (EulerOS-SA-2020-1468)

According to the versions of the cronie packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service memory consumption via a large...

TP-Link Archer A7/C7 - Unauthenticated LAN Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution', 'Description' = %q This module exploits a command injection...

TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution Exploit

This Metasploit module exploits a command injection vulnerability in the tdpServer daemon /usr/bin/tdpServer, running on the router TP-Link Archer A7/C7 AC1750, hardware version 5, MIPS Architecture, firmware version 190726. The vulnerability can only be exploited by an attacker on the LAN side o...

CVE-2020-11723

Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction...

Hardcoded credentials

Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction...

CVE-2018-10865

It has been discovered that redhat-certification does not perform an authorization check and allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system. An attacker could use this flaw to send requests to port 8009 of any host or to keep restarting the...

CVE-2020-11723: Use of Hard-coded Credentials

Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction...

PT-2020-12809

Name of the Vulnerable Software and Affected Versions Cellebrite UFED versions 5.0 through 7.29 Description The issue concerns the use of hardcoded RSA private keys for authentication to the ADB daemon on target devices. These extracted keys can potentially be used to compromise the integrity of...

[SECURITY] Fedora 31 Update: nrpe-4.0.2-2.fc31

Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...

[SECURITY] Fedora 30 Update: nrpe-4.0.2-2.fc30

Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...

Cellebrite Hardcoded ADB Authentication Keys

Vulnerability Details Affected Vendor: Cellebrite Affected Product: UFED Affected Version: 5.0 - 7.29 Platform: Embedded Windows CWE Classification: CWE-321: Use of hardcoded cryptographic keys CVE ID: CVE-2020-11723 2. Vulnerability Description Cellebrite UFED uses four hardcoded RSA private...

Denial Of Service (DoS)

openswan is vulnerable to denial of service DoS. The vulnerability exists as a use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon. This issue...

Denial Of Service (DoS)

rsyslog is vulnerable to denial of service. A two byte buffer overflow flaw was found in the rsyslog daemon's parseLegacySyslogMsg function. An attacker able to submit log messages to rsyslogd could use this flaw to crash the daemon...

Denial Of Service (DoS)

dbus is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as...

Denial Of Service (DoS)

scsi-target-utils is vulnerable to denial of service DoS. The vulnerability exists as a double-free flaw was found in scsi-target-utils' tgtd daemon. A remote attacker could trigger this flaw by sending carefully-crafted network traffic, causing the tgtd daemon to crash...

Denial Of Service (DoS)

PC/SC Lite is vulnerable to Denial Of Service DoS.It is possible due to the way the pcscd daemon coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause the pcscd...

Buffer Overflows

PC/SC Lite is vulnerable to buffer overflow in the way the pcscd daemon. It is due to a resource manager that coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause...

Denial Of Service (DoS)

The scsi-target-utils package is vulnerable to Denial Of Service DoS. Due to buffer overflow flaws found in scsi-target-utils' tgtd daemon,a remote attacker could trigger these flaws by sending a carefully-crafted Internet Storage Name Service iSNS request, causing the tgtd daemon to crash...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS. The vulnerability exists as multiple flaws were discovered in the way the slapd daemon handled modify relative distinguished name modrdn requests. An authenticated user with privileges to perform modrdn operations could use these flaws to crash the...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS. The vulnerability exists as an authenticated user with privileges to perform modrdn operations could use these flaws to crash the slapd daemon via specially-crafted modrdn requests...