13747 matches found
Privilege Escalation
github.com/pterodactyl/wings is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order fo...
Tenda AC23 ē¼å²åŗéčÆÆę¼ę“
Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 suffers from an out-of-bounds write vulnerability, which originates from the...
USN-5863-1 linux-azure vulnerabilities
It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 TamƔs Koczka discovered that th...
The vulnerability of the pesign demon in the system initialization and service management subsystem of systemd allows a malicious actor to escalate their privileges.
The vulnerability of the pesign demon in the system initialization and service management subsystem of systemd relates to the possibility of bypassing paths. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Design/Logic Flaw
Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their...
PT-2023-19941 Ā· Wings Ā· Wings
Name of the Vulnerable Software and Affected Versions: Wings versions prior to v1.11.3 Wings versions prior to v1.7.3 Description: The vulnerability in Wings allows attackers to create new files and directory structures on the host system, potentially enabling them to change resource allocations,...
The vulnerability of the Routing Protocol Daemon (rpd) in Juniper Networksā Junos OS Evolved and Junos operating systems allows a attacker to cause a service failure.
The vulnerability of the Routing Protocol Daemon rpd in Juniper Networksā Junos OS Evolved and Junos operating systems exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the WAagent demon of the Azure Service Fabric Container allows attackers to escalate their privileges.
The vulnerability of WAagent, a demon of Azure Service Fabric Container, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2022-38066
An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...
Vulnerabilities fixed in Juniper Junos OS
Juniper has fixed vulnerabilities in MX and SRX systems. A unauthenticated malicious party could potentially exploit them to cause a denial-of-service DoS. To this end the malicious party can send malicious network traffic to the vulnerable system. Juniper has released updates to fix the...
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
A vulnerability was found in SSSD, in the libssscertmap functionality. PKINIT enables a client to authenticate to the KDC using an X.509 certificate and the corresponding private key, rather than a passphrase or keytab. FreeIPA uses mapping rules to map a certificate presented during a PKINIT...
Oracle Linux 9 : usbguard (ELSA-2023-0303)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0303 advisory. 1.0.0-10.2 - Fix dbus memory leak on connection failure - Fix unauthorized access via D-bus Resolves: rhbz2127877 Tenable has extracted the preceding descriptio...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets
A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash when receiving a message with specific invalid type signatures...
dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly
A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format...
dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type
A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash when receiving a message whose array length is inconsistent with the size of the element type...
conntrack-tools bug fix and enhancement update
An update is available for conntrack-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The conntrack-tools packages enable the user to set up a High...
The vulnerability of the Demon Routing Protocol Daemon (rpd) in JunOS and JunOS Evolved operating systems allows a hacker to induce a service failure.
The vulnerability of the Demon Routing Protocol Daemon rpd for JunOS and JunOS Evolved is related to insufficient validation of input data during the processing of BGP messages. Exploiting this vulnerability can allow a malicious actor to cause service failures...
RHEL 9 : dbus (RHSA-2023:0335)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0335 advisory. D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a...
Ubuntu 18.04 LTS / 20.04 LTS : Git regression (USN-5810-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5810-2 advisory. USN-5810-1 fixed vulnerabilities in Git. This update introduced a regression as it was missing some commit lines. This update fixes the problem. Tenab...