PT-2025-1004 · Unknown · 501 Wireless Client Bridge

Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge affected versions not specified Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated...

CVE-2024-54007: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

PT-2025-1018

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking 501 Wireless Client Bridge affected versions not specified Description The issue is related to command injection vulnerabilities in the web interface of the HPE Aruba Networking 501 Wireless Client Bridge. These...

HPESBNW04763 rev.1 - HPE Aruba Networking 501 Wireless Client Bridge Authenticated Remote Command Injection Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 501 Client Bridge - Please refer to the "Vulnerability Summary" for version details. HP 501 Wireless Client Bridge - Pleas...

Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

CVE-2024-54006: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

Fixed in ClickHouse v25.1.5.5, 2025-01-05​

When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits...

CVE-2025-1385

When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits...

PT-2026-3771

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.40 through 9.18.43 BIND 9 versions 9.20.13 through 9.20.17 BIND 9 versions 9.21.12 through 9.21.16 BIND 9 versions 9.18.40-S1 through 9.18.43-S1 BIND 9 versions 9.20.13-S1 through 9.20.17-S1 Description Malformed BRID/HHIT...

CVE-2020-9082

There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to...

WordPress Edwiser Bridge plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Edwiser Bridge versions = 3.0.8...

Malicious code in gravity-bridge-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae232ba265c5a6f6819814f2baf364c618baaaac7305273d18133f5eebab1f95 The OpenSSF Package Analysis project identified 'gravity-bridge-site' @ 1.1.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-12118 Malicious code in gravity-bridge-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae232ba265c5a6f6819814f2baf364c618baaaac7305273d18133f5eebab1f95 The OpenSSF Package Analysis project identified 'gravity-bridge-site' @ 1.1.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in bridge-transaction-parser-hop400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4d626a3e8ed70bfec2b959fdb25cd9fb0ce41efa9e9be1d82a5ce85531ec40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7166-3 linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

Ubuntu 20.04 LTS : Linux kernel (IoT) vulnerabilities (USN-7159-4)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7159-4 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-access (0.8.1) +2 more potentially affected by CVE-2024-12798 via ch.qos.logback:logback-core (0.8.1)

ch.qos.logback:logback-core MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-access 0.8.1 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.8), ch.qos.logback:logback-access (0.8) +2 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.8)

ch.qos.logback:logback-core MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8 - ch.qos.logback:logback-access 0.8 - ch.qos.logback:logback-classic 0.8 -...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-access (0.9.1) +2 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.9.1)

ch.qos.logback:logback-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-access 0.9.1 - ch.qos.logback:logback-classic...