4168 matches found
CVE-2022-45184
The CVE-2022-45184 entry concerns Ironman Software PowerShell Universal Web Server under v3.x/v2.x where a directory-traversal flaw in the web server endpoints allows a remote attacker with administrator privileges to create, delete, update, and display files outside the configuration directory v...
CVE-2022-45183
The CVE-2022-45183 vulnerability affects Ironman Software PowerShell Universal 2.x and 3.x Web Server and enables privilege escalation: an attacker possessing a valid app token can retrieve other app tokens by ID via an HTTP request. The issue is rated high (CVSS v3.1 base score 8.8) with network...
PT-2022-27420
Name of the Vulnerable Software and Affected Versions Ironman Software PowerShell Universal versions prior to 3.5.3 Ironman Software PowerShell Universal versions prior to 3.4.7 Description The issue allows a remote attacker with administrator privilege to create, delete, update, and display file...
CVE-2022-45184: Improper Limitation of a Pathname to a Restricted Directory
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...
PT-2022-27419
Name of the Vulnerable Software and Affected Versions Ironman Software PowerShell Universal versions 2.x through 3.x prior to 2.12.6 Ironman Software PowerShell Universal versions 3.x prior to 3.4.7 Ironman Software PowerShell Universal versions 3.x prior to 3.5.3 Description The issue allows an...
Important Photon OS Security Update - PHSA-2022-0279
Updates of 'strongswan', 'powershell', 'pixman' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-4.0-0279
Updates of 'strongswan', 'sudo', 'powershell', 'pixman' packages of Photon OS have been released...
Reverse Lookup IP Addresses
This module reverse resolves an IP address or IP address range to hostnames. Module Options msf use post/multi/recon/reverselookup msf postreverselookup show actions ...actions... msf postreverselookup set ACTION msf postreverselookup show options ...show and set options... msf postreverselookup...
Patch Tuesday - November 2022
It’s a relatively light Patch Tuesday this month by the numbers – Microsoft has only published 67 new CVEs, most of which affect their flagship Windows operating system. However, four of these are zero-days, having been observed as exploited in the wild. The big news is that two older zero-day CV...
Amadey Bot Spotted Deploying LockBit 3.0 Ransomware on Hacked Machines
The Amadey malware is being used to deploy LockBit 3.0 ransomware on compromised systems, researchers have warned. "Amadey bot, the malware that is used to install LockBit, is being distributed through two methods: one using a malicious Word document file, and the other using an executable that...
Important Photon OS Security Update - PHSA-2022-0274
Updates of 'powershell' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-4.0-0274
Updates of 'powershell' packages of Photon OS have been released...
Apache CouchDB Erlang Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Couchdb Erlang RCE', 'Description' = %q In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installatio...
Apache CouchDB Erlang Remote Code Execution Exploit
In Apache CouchDB versions prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
Vice Society Hackers Are Behind Several Ransomware Attacks Against Education Sector
A cybercrime group known as Vice Society has been linked to multiple ransomware strains in its malicious campaigns aimed at the education, government, and retail sectors. The Microsoft Security Threat Intelligence team, which is tracking the threat cluster under the moniker DEV-0832, said the gro...
GHSA-47XC-9RR2-Q7P4 Improper Control of Generation of Code ('Code Injection') in Azure CLI
Description In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. For example: Application X is a web application wi...
Improper Control of Generation of Code ('Code Injection') in Azure CLI
Description In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. For example: Application X is a web application wi...
PYSEC-2022-43177
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. T...
CVE-2022-39327
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. T...
Code injection
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. T...