66 matches found
CVE-2026-36827
The Panabit PAP-XM320 (up to and including V7.7 ) contains a command injection vulnerability in its web management interface. The vulnerability occurs because the interface invokes the backend helper /usr/sbin/pappiw and passes user-controlled parameters to it. The helper performs unsafe argument...
Panabit PAP-XM320 操作系统命令注入漏洞
Panabit PAP-XM320 is an enterprise-level Internet behavior management and traffic control gateway device developed by Panabit Corporation. Versions of Panabit PAP-XM320 prior to v7.7 contain a vulnerability related to operating system command injection. This vulnerability arises from the...
CVE-2026-36829
An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and...
PT-2026-41950
Name of the Vulnerable Software and Affected Versions Panabit PAP-XM320 versions prior to 7.8 Description A command injection issue exists in the CGI component of the software. Authenticated users can execute arbitrary shell commands with root privileges through the '/cgi-bin/tools/ajax cmd'...
PT-2026-41951
Name of the Vulnerable Software and Affected Versions Panabit PAP-XM320 versions prior to 7.8 Description An authentication bypass exists in the embedded HTTP server. The server validates session cookies by performing a filesystem existence check based on a user-controlled cookie value. Due to a...
CVE-2026-36829
The Panabit PAP-XM320 network traffic management gateway, specifically versions up to and including v7.7 (with some records specifying prior to v7.8), contains an authentication bypass vulnerability in its embedded HTTP server. The root cause is a path traversal flaw occurring because the server ...
CVE-2026-36829: Improper Limitation of a Pathname to a Restricted Directory
An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and...
Malicious Package
Overview pap-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2014-6266
Malware in sbrugna...
synacktiv-rules
synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...
MAL-2024-11062 Malicious code in pap-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pap-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pap-rn-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10765 Malicious code in pap-rn-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Updated freeradius packages fix security vulnerability
This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...
MGASA-2024-0264 Updated freeradius packages fix security vulnerability
This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...
Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 CVSS score: 9.3, the vulnerability has been described as a case of missing authentication in its...
PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead to Privilege Escalation
This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...