TFTP Fetch

Fetch and execute a PPC64LE payload from a TFTP server. Module Options msf use payload/cmd/linux/tftp/ppc64le/meterpreterreversehttp msf payloadmeterpreterreversehttp show actions ...actions... msf payloadmeterpreterreversehttp set ACTION msf payloadmeterpreterreversehttp show options ...show and...

The vulnerability of the ets_class_from_arg() function in the net/sched/sch_ets.c module of the net/sched subsystem of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the etsclassfromarg function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system lies in the handling of buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

I-O Data Device UD-LT2 操作系统命令注入漏洞

The I-O Data Device UD-LT2 is a wireless router from I-O Data Device Japan. An operating system command injection vulnerability exists in I-O Data Device UD-LT2 1.00.008SE and prior versions, which stems from the presence of a special element that is not properly neutralized, which could allow an...

Elseta Vinci Protocol Analyzer 操作系统命令注入漏洞

Elseta Vinci Protocol Analyzer is a software package from Elseta for engineers and developers to simulate and analyze protocols used primarily in electrical engineering systems. An operating system command injection vulnerability exists in Elseta Vinci Protocol Analyzer. An attacker exploiting th...

The vulnerability of the SNMP protocol implementation in Cisco IOS and IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of SNMP protocol implementations in Cisco IOS and IOS XE operating systems stems from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the SNMP protocol implementation in Cisco IOS and IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of SNMP protocol implementations in Cisco IOS and IOS XE operating systems stems from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted requests...

Important Photon OS Security Update - PHSA-2025-5.0-90-0477

Updates of 'grub2' packages of Photon OS have been released...

CVE-2025-25894

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the sambawg and sambanbn parameters. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE

It is an offensive tool for Linux. The repository appears to be...

The vulnerability of DRM/bridge components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/bridge components in the Linux operating system is related to the pointer to NULL. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the dpaa2-switch component in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the dpaa2-switch component in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow unauthorized access to protected information...

mySCADA myPRO OS Command Injection Vulnerability (CNVD-2025-03918)

mySCADA myPRO is a professional HMI/SCADA system from mySCADA designed for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO that originates from not properly validating input. An attacker could exploit this...

Huawei HarmonyOS and EMUI display module memory misreference vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in Huawei...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0475

Updates of 'openssh' packages of Photon OS have been released...

CVE-2025-1370

CVE-2025-1370 affects MicroWorld eScan Antivirus 7.0.32 on Linux, where the sprintf function in epsdaemon (Autoscan USB component) is exploitable, enabling local OS command injection. The vulnerability is described as critical with local attack vector; exploitation is possible with user interacti...

Google Android elevation of privilege vulnerability (CNVD-2025-05221)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to elevate privileges...

The vulnerability of the Time Zone component in iOS, Mac OS, and iPadOS operating systems allows attackers to exploit it to disclose protected information.

The vulnerability of the Time Zone component in iOS, Mac OS, and iPadOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

GNU Emacs OS Command Injection Vulnerability

GNU Emacs is a family of text editors in the American GNU community. GNU Emacs suffers from an operating system command injection vulnerability that stems from mishandling of the custom "man" URI scheme, which can be exploited to execute arbitrary shell commands...

Google Android elevation of privilege vulnerability (CNVD-2025-05218)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to elevate privileges...

MicroWorld eScan Antivirus 命令注入漏洞

MicroWorld eScan Antivirus is an antivirus software from MicroWorld. A command injection vulnerability exists in MicroWorld eScan Antivirus version 7.0.32. An attacker can exploit this vulnerability to perform operating system command injection locally...