Lucene search
+L

3747 matches found

Photon
Photon
added 2022/11/16 12:00 a.m.54 views

Important Photon OS Security Update - PHSA-2022-3.0-0488

Updates of 'linux-aws', 'powershell', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

7.8CVSS6AI score0.00797EPSS
SaveExploits0
OSV
OSV
added 2022/11/14 8:15 a.m.13 views

CVE-2022-45184

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...

7.2CVSS5.8AI score0.01963EPSS
SaveExploits0References3
NVD
NVD
added 2022/11/14 8:15 a.m.29 views

CVE-2022-45184

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...

7.2CVSS0.01963EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/11/14 8:15 a.m.3 views

CVE-2022-45184

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...

7.2CVSS7.2AI score0.01963EPSS
SaveExploits0References4
Prion
Prion
added 2022/11/14 8:15 a.m.22 views

Privilege escalation

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6...

6.5CVSS8.5AI score0.00789EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/11/14 8:15 a.m.18 views

Directory traversal

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...

5.8CVSS6.9AI score0.01963EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/11/14 8:15 a.m.4 views

CVE-2022-45183

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6...

8.8CVSS7.4AI score0.00789EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2022/11/14 6:05 a.m.65 views

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor's infection chain. Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that's used to...

1.5AI score
SaveExploits0
CNNVD
CNNVD
added 2022/11/14 12:00 a.m.10 views

Ironman Software PowerShell Universal 安全漏洞

Ironman Software PowerShell Universal is a single pane for managing and delegating access to automation environments from Ironman Software. A security vulnerability exists in Ironman Software PowerShell Universal, which stems from a privilege escalation on a web server, that allows an attacker wi...

8.8CVSS8AI score0.00789EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/11/14 12:00 a.m.32 views

CVE-2022-45184

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafte...

7.2AI score0.01963EPSS
SaveExploits0References3
CVE
CVE
added 2022/11/14 12:00 a.m.61 views

CVE-2022-45183

The CVE-2022-45183 vulnerability affects Ironman Software PowerShell Universal 2.x and 3.x Web Server and enables privilege escalation: an attacker possessing a valid app token can retrieve other app tokens by ID via an HTTP request. The issue is rated high (CVSS v3.1 base score 8.8) with network...

8.8CVSS8.5AI score0.00789EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/11/14 12:00 a.m.54 views

CVE-2022-45184

The CVE-2022-45184 entry concerns Ironman Software PowerShell Universal Web Server under v3.x/v2.x where a directory-traversal flaw in the web server endpoints allows a remote attacker with administrator privileges to create, delete, update, and display files outside the configuration directory v...

7.2CVSS6.9AI score0.01963EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/11/14 12:00 a.m.11 views

Ironman Software PowerShell Universal 路径遍历漏洞

Ironman Software PowerShell Universal is a single pane for managing and delegating access to automation environments from Ironman Software. A security vulnerability exists in Ironman Software PowerShell Universal that stems from a web server that allows directory traversal outside of the...

7.2CVSS7.2AI score0.01963EPSS
SaveExploits0References5
Photon
Photon
added 2022/11/10 12:00 a.m.40 views

Important Photon OS Security Update - PHSA-2022-0279

Updates of 'strongswan', 'powershell', 'pixman' packages of Photon OS have been released...

4.6CVSS1.7AI score0.01742EPSS
SaveExploits1
Photon
Photon
added 2022/11/10 12:00 a.m.50 views

Important Photon OS Security Update - PHSA-2022-4.0-0279

Updates of 'strongswan', 'sudo', 'powershell', 'pixman' packages of Photon OS have been released...

8.8CVSS6.7AI score0.01742EPSS
SaveExploits1
Metasploit
Metasploit
added 2022/11/09 7:50 p.m.330 views

Reverse Lookup IP Addresses

This module reverse resolves an IP address or IP address range to hostnames. Module Options msf use post/multi/recon/reverselookup msf postreverselookup show actions ...actions... msf postreverselookup set ACTION msf postreverselookup show options ...show and set options... msf postreverselookup...

7AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2022/11/08 8:02 p.m.175 views

Patch Tuesday - November 2022

It’s a relatively light Patch Tuesday this month by the numbers – Microsoft has only published 67 new CVEs, most of which affect their flagship Windows operating system. However, four of these are zero-days, having been observed as exploited in the wild. The big news is that two older zero-day CV...

0.8AI score0.9997EPSS
SaveExploits25
The Hacker News
The Hacker News
added 2022/11/08 2:52 p.m.79 views

Amadey Bot Spotted Deploying LockBit 3.0 Ransomware on Hacked Machines

The Amadey malware is being used to deploy LockBit 3.0 ransomware on compromised systems, researchers have warned. "Amadey bot, the malware that is used to install LockBit, is being distributed through two methods: one using a malicious Word document file, and the other using an executable that...

0.5AI score
SaveExploits0
Photon
Photon
added 2022/11/03 12:00 a.m.43 views

Important Photon OS Security Update - PHSA-2022-0274

Updates of 'powershell' packages of Photon OS have been released...

5CVSS1.7AI score0.05188EPSS
SaveExploits0
Photon
Photon
added 2022/11/03 12:00 a.m.39 views

Important Photon OS Security Update - PHSA-2022-4.0-0274

Updates of 'powershell' packages of Photon OS have been released...

7.5CVSS1.7AI score0.05188EPSS
SaveExploits0
Rows per page
Query Builder