48 matches found
CVE-2021-31294
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this...
K39204079: GNU C Library vulnerability CVE-2015-8983
Security Advisory Description Integer overflow in the IOwstroverflow function in libio/wstrops.c in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors related to computin...
PT-2023-6472 · Cisco · Cisco Secure Email/Web Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Email Gateway ESA and Cisco Secure Email and Web Manager SMA affected versions not specified Description: A vulnerability in the Web UI and administrative CLI of the affected systems could allow an authenticated remote or local...
CVE-2022-22156
An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle PitM attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The...
CVE-2021-20157
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command...
CVE-2021-20157
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command...
CVE-2021-20158
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command...
CVE-2021-20158
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command...
PT-2021-13812
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an unauthenticated, malicious user to force a device to reboot by exploiting a hidden administrative command. Recommendations: At the moment, there is no informatio...
PT-2021-13813
Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue allows an unauthenticated, malicious actor to bypass authentication and force a change of the admin password due to a hidden administrative command. Recommendations: For Trendn...
Trendnet AC2600 访问控制错误漏洞
Trendnet AC2600 TEW-827DRU is a wireless router. version 2.08B01 of the Trendnet AC2600 TEW-827DRU contains a security vulnerability that stems from a hidden administrative command that could be exploited to force an attacker to change the administrator password...
CVE-2021-20157: Undefined Security Weakness
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command...
CVE-2021-20158: Missing Authentication for Critical Function
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command...
PT-2020-11874
Name of the Vulnerable Software and Affected Versions SICAM MMU versions prior to V2.05 SICAM SGU affected versions not specified SICAM T versions prior to V2.18 Description A vulnerability has been identified that could allow an attacker with access to the device's web server to execute...
Loading Kernel Shellcode
In the wake of recent hacking tool dumps, the FLARE team saw a spike in malware samples detonating kernel shellcode. Although most samples can be analyzed statically, the FLARE team sometimes debugs these samples to confirm specific functionality. Debugging can be an efficient way to get around...
F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...
Insufficient Storage for VSS Error "0x8004231F or Error: VSSControl: -2147467259"
Challenge The following error occurs during a task that utilizes the Microsoft VSS subsystem: VSSControl: -2147467259 Backup job failed. Cannot create a shadow copy of the volumes containing writer's data. VSS asynchronous operation is not completed. Operation: Shadow copies commit. Code:...
CVE-2013-0083
Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...
CVE-2013-0083
CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...