182 matches found
CVE-2023-40459
CVE-2023-40459 CVE-2023-40459 未認証のDoS PoCエクスプロイト。 この脆弱性は、Sierra Wirelessの製品であるALEOS 4.16以前のACEManagerコンポーネントに影響を与えます。 使用方法 python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091 参考 NVD 記事 Double Take Zero Day...
CVE-2023-40459
はじめに このリポジトリには、CVE-2023-40459 脆弱性の PoC が含まれています。この脆弱性は、Sierra Wireless 製品である ALEOS 4.16 およびそれ以前のバージョンの ACEManager ファイルに影響を与えます。この攻撃は、初期アクセス権がなくても、対象デバイスへのアクセスを妨害 DoS する可能性があります。 使用するには、次のコマンドを実行してください: $ python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091...
CVE-2018-4068
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this...
CVE-2018-4069
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...
CVE-2018-4067
An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...
EUVD-2018-15855
Malware in sbrugna...
EUVD-2018-15853
Malware in sbrugna...
EUVD-2019-3518
Malware in sbrugna...
EUVD-2019-3517
Malware in sbrugna...
EUVD-2018-15850
Malware in sbrugna...
EUVD-2023-45029
Malicious code in bioql PyPI...
EUVD-2023-45033
Malicious code in bioql PyPI...
EUVD-2023-45030
Malicious code in bioql PyPI...
EUVD-2022-49453
Malicious code in bioql PyPI...
EUVD-2023-45031
Malicious code in bioql PyPI...
EUVD-2023-45032
Malicious code in bioql PyPI...
EUVD-2022-49452
Malicious code in bioql PyPI...
CVE-2022-46649
Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device...
CVE-2022-46650
Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page...
CVE-2018-4066
An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...