Lucene search
+L

3095 matches found

attackerkb
attackerkb
•added 2024/05/03 2:15 a.m.•8 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS8.1AI score0.03836EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/03 2:15 a.m.•17 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS6.3AI score0.03836EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 2:15 a.m.•55 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9.3AI score0.03836EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/03 1:59 a.m.•30 views

CVE-2023-38120 Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9AI score0.03836EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•4 views

CVE-2023-38120: Improper Neutralization of Special Elements used in an OS Command

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS6.8AI score0.03836EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•6 views

CVE-2024-33793: Improper Neutralization of Special Elements used in an OS Command

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS6.3AI score0.00313EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/03 12:00 a.m.•19 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.7AI score0.00313EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/03 12:00 a.m.•93 views

CVE-2024-33793

The netis-systems MEX605 wireless device, specifically version v2.00.06 , is vulnerable to arbitrary OS command execution . An attacker can achieve this by sending a crafted payload to the device's ping test page . This vulnerability is characterized as an improper neutralization of special eleme...

5.3CVSS7.7AI score0.00313EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/03 12:00 a.m.•15 views

PT-2024-25484 · Netis Systems · Netis-Systems Mex605

Name of the Vulnerable Software and Affected Versions: netis-systems MEX605 version 2.00.06 Description: The issue allows attackers to execute arbitrary OS commands via a crafted payload to the "ping test page". Recommendations: For netis-systems MEX605 version 2.00.06, consider restricting acces...

5.3CVSS7.8AI score0.00313EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•39 views

Adtran SR400ac 安全漏洞

The Adtran SR400ac is a router from the US-based Adtran Corporation. A security vulnerability exists in the Adtran SR400ac that stems from the presence of a ping command injection remote code execution vulnerability, which can be exploited by an attacker to execute code in a root context...

8.8CVSS9.3AI score0.03836EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/03 12:00 a.m.•48 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.6AI score0.00313EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•21 views

WordPress Plugin Import WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS8.7AI score0.00568EPSS
SaveExploits2References2
OSV
OSV
•added 2024/04/19 4:15 a.m.•14 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS5.8AI score0.00756EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 4:15 a.m.•48 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS8.3AI score0.00756EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/19 12:00 a.m.•15 views

Broadcom Brocade SANnav 信息泄露漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a that originates when the Brocade SANav service periodically sends ping commands to gridgain.com in the background to check for available...

8.2CVSS9.3AI score0.00756EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•0 views

CVE-2024-29961: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS5.8AI score0.00756EPSS
SaveExploits0References2
Broadcom
Broadcom
•added 2024/04/17 12:00 a.m.•40 views

Ping at regular intervals (CVE-2024-29961)

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com and ignite.apache.org to check if updates are available for the Component. This could make an unauthenticated, remote...

8.2CVSS8.3AI score0.00756EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/04/10 5:15 a.m.•11 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS5.8AI score0.00225EPSS
SaveExploits2References1
NVD
NVD
•added 2024/04/10 5:15 a.m.•51 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS6.5AI score0.00225EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/04/10 5:00 a.m.•45 views

CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

6.7AI score0.00225EPSS
SaveExploits2References1
Rows per page
Query Builder