curl: Multiple Vulnerabilities

Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in curl. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

CVEs

It is an offensive tool for web exploitation. This repository co...

CVE-2024-5958

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24...

CVE-2024-5958

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.This issue affects Panel: before v2.3.24...

CVE-2024-5958

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24...

CVE-2024-5958

CVE-2024-5958 affects the Eliz Software Panel. Connected sources confirm an SQL Injection vulnerability due to improper neutralization of special elements, enabling command line execution . The issue impacts Panel versions prior to 2.3.24 . A practical remediation is to upgrade to 2.3.24 or later...

Could not open websocket connection please try by login again /nsconfig/sshd_config.

After Upgrade to 13.1 53.17, the customer is not able to do several actions in the Netscaler, including generate the support bundle from the GUI or connect to the CLI through the GUI, error: Could not open websocket connection. Please try by login again...

CVE-2024-42503 Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)

Authenticated command execution vulnerability exist in the ArubaOS command line interface CLI. Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system...

CVE-2024-42502 Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system...

CVE-2024-42502 Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system...

Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

RHEL 8 : pcs (RHSA-2024:6703)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6703 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rexml: rubygem-rexml:...

[SECURITY] Fedora 41 Update: clamav-1.0.7-1.fc41

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

...

The vulnerability of the command-line interface of the Cisco NX-OS operating system in Cisco Nexus switches allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface of the Cisco NX-OS operating system in Cisco Nexus switches exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to execute arbitrary commands on the basic operating system...

PT-2024-28855 · No Ip · No-Ip Dynamic Update Client

Name of the Vulnerable Software and Affected Versions: No-IP Dynamic Update Client DUC versions 3.x Description: The No-IP Dynamic Update Client DUC v3.x uses cleartext credentials that may occur on a command line or in a file. The vendor's position is that cleartext in /etc/default/noip-duc is...

No-IP Dynamic Update Client 安全漏洞

No-IP Dynamic Update Client is a dynamic update software from No-IP. A security vulnerability exists in No-IP Dynamic Update Client version v3.x that originates from the use of plaintext credentials that may appear on the command line or in a file...

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8688

CVE-2024-8688: A local, authenticated-admin vulnerability in Palo Alto Networks PAN-OS CLI allows reading arbitrary files on the firewall via improper neutralization of matching symbols. Affected PAN-OS versions include PAN-OS 9.1.x before 9.1.15, 10.0.x before 10.0.10, and 10.1.x before 10.1.1 (...

PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall. Work around: No work around available...