316 matches found
GHSA-22Q8-GHMQ-63VF vulnerabilities
Vulnerabilities for packages: bat...
GHSA-22Q8-GHMQ-63VF vulnerabilities
Vulnerabilities for packages: bat...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
winDED Custom exploit for CVE-2023-38831 using python. Int...
GHSA-R24F-HG58-VFRW vulnerabilities
Vulnerabilities for packages: bat...
GHSA-R24F-HG58-VFRW vulnerabilities
Vulnerabilities for packages: bat...
PT-2023-30676 · Unknown · Opensupports
Name of the Vulnerable Software and Affected Versions: OpenSupports version 4.11.0 Description: The issue allows an attacker to bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type in the comment function. This can enable the...
BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising
Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. "Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations," Tre...
SeroXen Incorporates Latest BatCloak Engine Iteration
We looked into the documented behavior of SeroXen malware and noted the inclusion of the latest iteration of the batch obfuscation engine BatCloak to generate a fully undetectable FUD .bat loader. This is the second part of a three-part series documenting the abuse of BatCloak’s evasion...
SUSE CVE-2021-28955
git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations most often seen on Windows...
[SECURITY] Fedora 36 Update: rust-bat-0.21.0-6.fc36
Cat1 clone with wings...
Fedora: Security Advisory for rust-bat (FEDORA-2023-3ec32f6d4e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: rust-bat-0.21.0-6.fc37
Cat1 clone with wings...
Fedora: Security Advisory for rust-bat (FEDORA-2023-e3c8abd37e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2023-33720 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential null pointer dereference in the cw bat probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...
The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary commands.
The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 is related to insufficient checking of arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the dir...
The vulnerability of the RSA KeyPassWD parameter in the web interface for managing Hirschmann BAT-C2 WLAN-client microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the RSA KeyPassWD parameter in the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a...
The vulnerability in the web interface of Hirschmann BAT-C2’s WLAN-client microprogramming software allows a hacker to perform arbitrary actions.
The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary code.
The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client micro-programming systems from Hirschmann BAT-C2 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafte...
Hirschmann (Belden) BAT-C2 8.8.1.0R8 Command Injection
CyberDanube Security Research 20221124-0 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Hirschmann Belden BAT-C2 vulnerable version| 8.8.1.0R8 fixed version| 09.13.01.00R04 CVE number| CVE-2022-40282 impact| High...
The vulnerability in the web interface for controlling Hirschmann BAT-C2 wireless client software allows a hacker to execute arbitrary code.
The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...