PT-2023-9236 · Nexgen · Nextgen Mirth Connect

Name of the Vulnerable Software and Affected Versions: NextGen Mirth Connect version 4.3.0 Description: A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data...

The vulnerability of the network and application monitoring tool used by VMware Aria Operations for Networks (previously known as vRealize Network Insight) lies in the lack of measures for data cleaning at the management level. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary commands.

The vulnerability of the network and application monitoring tool, VMware Aria Operations for Networks previously vRealize Network Insight, is related to the lack of measures for data cleaning at the management level. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of data cleansing measures at the management level. This allows attackers to execute arbitrary code.

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands using specially created data...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Privilege Escalation

github.com/hashicorp/nomad is vulnerable to Privilege Escalation. A remote attacker with the submit-job ACL permission is able to escalate to management-level privileges using the workload identity and task API by submitting a job without ACL policies...

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data remotely...

The vulnerability of the Atlassian Bitbucket Data Center and Bitbucket Server software lies in the lack of measures taken at the management level to clean data, allowing attackers to execute arbitrary code.

The vulnerability of the Atlassian Bitbucket Data Center and Bitbucket Server software-related data processing lies in the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the graphical web interface for managing and monitoring ClusterLabs Hawk, related to the lack of measures taken at the management level to clean data, allows a malicious actor to execute arbitrary commands on behalf of the root user.

The vulnerability of the graphical web interface for managing and monitoring ClusterLabs Hawk is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user remotely...

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows a hacker to trigger a service failure.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

PT-2022-5764 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR823G version 1.02B05 Description: The issue is related to the lack of data sanitization at the management level, which can be exploited by a remote attacker to execute arbitrary commands. This can lead to command injection...

The vulnerability of the Wi-Fi Aruba Instant deployment application, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Wi-Fi Aruba Instant deployment application is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted data...

The susceptibility of the microprogramming software of the iSTAR Ultra controller, related to the failure to take measures for data cleaning at the management level, allows the attacker to elevate their privileges to the root level.

The vulnerability of the iSTAR Ultra controller’s microprogramming software is related to the failure to take measures to clean data at the control level. Exploiting this vulnerability can allow an attacker, operating remotely, to elevate their privileges to the root level...

The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software, related to the lack of measures taken for data cleaning at the management level, allows attackers to introduce malicious code.

The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to inject malicious code remotely...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken at the management level to clean up data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken at the management level to clean up data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to clean data at the management level, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...