CVE-2019-9859: Improper Neutralization of Special Elements used in an OS Command

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

PT-2020-18849

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component. An attacker with local system access can corrupt a system file, potentially leading to denial of service or...

CVE-2020-5957: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

Exchange Control Panel Viewstate Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'bindata' class MetasploitModule 'Exchange Control Panel Viewstate Deserialization', 'Description' = %q This module exploits a .NET serialization vulnerability i...

PT-2020-22883

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои...

PT-2020-5535

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel affected versions not specified Description: The issue is related to insufficient access control in the NVIDIA Control Panel for NVIDIA GeForce, Quadro, NVS, and Tesla graphics processing unit drivers on Windows operating...

PT-2020-5526

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel affected versions not specified Description: The issue is related to errors in path checking for dynamically loaded libraries in the NVIDIA Control Panel driver for NVIDIA GeForce, Quadro, NVS, and Tesla graphics processo...

PT-2020-22881

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с ошибками проверки пути загружаемых динамических библиотек. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the Exchange Control Panel web application. The product fails to generate a unique...

Exchange Control Panel ViewState Deserialization

This module exploits a .NET serialization vulnerability in the Exchange Control Panel ECP web page. The vulnerability is due to Microsoft Exchange Server not randomizing the keys on a per-installation basis resulting in them using the same validationKey and decryptionKey values. With knowledge of...

Information disclosure

An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340...

CVE-2012-6341: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340...

ABB CP651 HMI Trust Management Issue Vulnerability

The ABB CP651 is a control panel from ABB Switzerland. A vulnerability exists in the ABB CP651 HMI with trust management issues. An attacker could exploit this vulnerability to insert and run arbitrary code on an affected system...

KLA11535 An elevation of privilege vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install...

Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Author: LiquidWorm Product web page: https://www.inim.biz Link:...

Inim Electronics Smartliving SmartLAN 6.x - Unauthenticated Server-Side Request Forgery Vulnerabilit

Exploit for hardware platform in category web applications Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Unauthenticated Server-Side Request Forgery Author: LiquidWorm Product web page: https://www.inim.biz Link:...

Inim Electronics Smartliving SmartLAN 6.x - Unauthenticated Server-Side Request Forgery

Inim Electronics Smartliving SmartLAN 6.x - Unauthenticated Server-Side Request Forgery Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Unauthenticated Server-Side Request Forgery Author: LiquidWorm Date: 2019-12-09 Product web page: https://www.inim.biz Link:...