50 matches found
CVE-2023-33413
The PT-Security entry for CVE-2023-33413 details a flaw in Supermicro IPMI BMC on X11/M11 devices up to firmware 3.17.02. The root cause is hardcoded configuration file encryption keys used by the IPMI BMC config function, enabling remote authenticated users to craft/upload a malicious configurat...
CVE-2023-42795
Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...
Vulnerability fixed in Apache Tomcat
Apache Foundation has fixed a vulnerability in Tomcat. The vulnerability is in the way authentication via FORM is implemented and allows a malicious party to execute an open redirect. This can lead to Cross-Site Scripting Attacks. Such an attack can lead to execution of arbitrary code in the...
CVE-2023-1097
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...
CVE-2023-1097
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...
Command injection
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...
CVE-2023-1097
Baicells EG7035-M11 devices with BCE-ODU-1.0.8 and prior firmware are affected by an improper HTTP GET command injection vulnerability. The issue allows pre-login execution of commands with root privileges via HTTP GET, as demonstrated and validated by a third‑party analyst. Affected component: d...
CVE-2023-1097 Unauthenticated Command Injection EG7035-M11 Series
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...
CVE-2023-1097 Unauthenticated Command Injection EG7035-M11 Series
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party...
Baicells EG7035-M11 命令注入漏洞
The Baicells EG7035-M11 is an LTE Outdoor CPE from Baicells USA. A security vulnerability exists in the Baicells EG7035-M11 BCE-ODU-1.0.8 version and prior versions, which stems from vulnerability to improper code injection via HTTP GET commands...
PT-2023-16751 · Baicells · Baicells Eg7035-M11
Name of the Vulnerable Software and Affected Versions: Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 Description: The issue concerns improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and are executed with root permissions...
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request...
Google Chrome Blink Code Issue Vulnerability
Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A code issue vulnerability exists in versions of Blink prior to m11 in Google Chrome. The vulnerability arises from a design or...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
Design/Logic Flaw
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-1802
The CVE-2011-1802 entry concerns WebKit in Google Chrome prior to Blink M11/M12, where improper handling of counter nodes can cause memory corruption leading to a denial of service. The provided documents (NVD entry and duplicates in CNVD/UBU/CVE lists) consistently describe the issue as a memory...
CVE-2011-1802
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service memory corruption...
CVE-2011-1803
CVE-2011-1803 is a vulnerability in WebKit’s SVGSMILElement handling (third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h) that can occur in Google Chrome before Blink M11/M12 when trying to access a removed SMIL element. The issue is reported across multiple corroborating sources an...