SQL Injection Vulnerability in Graduation Design Sampling and Guidance Management System of Hunan Nebula Network Information Technology Co.

Hunan Nebula Network Information Technology Co., Ltd. was founded in 2016, the company is rooted in the field of higher education, especially higher vocational education in Hunan Province. A SQL injection vulnerability exists in the graduation design sampling and guidance management system of Hun...

Friday Squid Blogging: Squid-like Nebula

Pretty astronomical photo. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Remote Code Execution Via Path Traversal

github.com/slackhq/nebula is vulnerable to remote code execution via path traversal. Lack of handling of the user-provided unsafe routes in tundarwin.go or tunwindows.go allows an attacker to set a relative-path value and gain privileges of root-user to bypass security controls and to execute...

Slack Nebula Path Traversal Vulnerability

Slack Nebula is a scalable overlay network tool. A security vulnerability exists in Slack Nebula 1.1.0 and earlier versions. An attacker can exploit the vulnerability to execute code...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

Design/Logic Flaw

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

CVE-2020-11498 affects Slack Nebula up to version 1.1.0. A relative-path vulnerability in the tunnel drivers tun_darwin.go and tun_windows.go allows a low-privileged attacker to execute code in the context of the root user, with potential user-context execution as well. The issue enables path tra...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

PT-2020-12648

Name of the Vulnerable Software and Affected Versions Slack Nebula versions 1.1.0 and earlier Description The issue allows a low-privileged attacker to execute code in the context of the root user via tun darwin.go or tun windows.go. A user can also use Nebula to execute arbitrary code in the...

CVE-2020-11498: Improper Limitation of a Pathname to a Restricted Directory

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

Slack: Relative Path Vulnerability Results in Arbitrary Command Execution/Privilege Escalation

Overview The Nebula clients for Darwin and Windows call relative paths in "exec.Command" to "ifconfig" and "route" executables on Darwin, and to "netsh" on Windows. These commands are entered using relative paths, not absolute paths such as /sbin/ifconfig. When a binary is run with a relative pat...

Anker Nebula Capsule Pro Denial of Service Vulnerability

The Anker Nebula Capsule Pro is a projector device from Anker Innovations, USA. A security vulnerability exists in the Anker Nebula Capsule Pro NBUIM1V2.1.9 version. An attacker can exploit the vulnerability by sending data to the WifiService with the help of a specially crafted application to...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

Code injection

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

The CVE-2018-19980 vulnerability affects the Anker Nebula Capsule Pro NBUI_M1_V2.1.9 (Android 7.1.2). A crafted application sending data to WifiService can cause a denial of service, resulting in a reboot of the device. Connected sources (NVD, CNVD/CVELIST) confirm the impact as a DoS with an And...

PT-2018-15183

Name of the Vulnerable Software and Affected Versions Anker Nebula Capsule Pro NBUI M1 V2.1.9 Description The issue allows attackers to cause a denial of service, resulting in the reboot of the underlying Android 7.1.2 operating system. This can be achieved by sending crafted data to the...