Remote code execution

Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers...

PT-2023-23153 · Zoho · Zoho Manageengine Opmanager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OPManager versions through 126323 Description: The issue allows an authenticated user to achieve remote code execution via probe servers. This is related to a deserialization remote code execution RCE issue. Recommendations:...

CVE-2023-26735

blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

CVE-2023-26735

blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

DEBIAN-CVE-2023-26735

blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

Design/Logic Flaw

DISPUTED blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

UBUNTU-CVE-2023-26735

DISPUTED blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

PT-2023-20776 · Unknown +1 · Blackbox Exporter +1

Name of the Vulnerable Software and Affected Versions: blackbox exporter version 0.23.0 Description: The issue is related to an access control problem in the probe interface of blackbox exporter, allowing attackers to detect intranet ports and services, as well as download resources. It is noted...

PT-2025-40236

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the rtw88 usb driver. The leak occurs due to unreferenced objects during the USB probe routine, specifically within the rtw usb probe function...

Automating Citrix Probe Agent Installation and Configuration

Purpose This article contains instructions on using PowerShell to automate the installation and configuration of Citrix Probe Agent. The PowerShell script can be downloaded from this page. The same script can also be used to update the configured values for an existing installation of Probe Agent...

The vulnerability of the Analyzer probe component of the software for data analysis and processing in Hitachi Ops Center Analyzer, as well as the Analytics probe component of the software for maintaining the operation of Hitachi Infrastructure Analytics Advisor (HIAA), allows a perpetrator to carry out a “man-in-the-middle” type attack.

The vulnerability of the Analyzer probe component of the Hitachi Ops Center Analyzer software for data analysis and processing, as well as the Analytics probe component of the Hitachi Infrastructure Analytics Advisor HIAA software for data processing, is related to errors in the certificate...

Out-of-bounds

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2023-17835 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to how cpif handles probe failures, potentially leading to an out of bounds read due to a use after free. This could result in local information disclosure, with the requirement of System...

CVE-2023-21045

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2025-41126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the Linux kernel related to ioremap and memremap within the xgene hardware monitoring driver. Specifically, the xgene hwmon probe function in...

The vulnerability of the dwc3_qcom_probe() function (drivers/usb/dwc3/dwc3-qcom.c) in the Qualcomm USB 3.0 driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the dwc3qcomprobe function drivers/usb/dwc3/dwc3-qcom.c in the Qualcomm USB 3.0 driver for the Linux operating system is related to improper checking of erroneous pointer values. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-40167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtw usb probe function within the Realtek 88 wireless driver drivers/net/wireless/realtek/rtw88/usb.c:876. The issue occurs because memory allocated by...

Ez Systems eZ Platform 安全漏洞

Ez Systems eZ Platform is a content management system CMS based on the Symfony framework from Ez Systems, Norway. A security vulnerability exists in Ez Systems eZ Publish Ibexa Kernel versions prior to 7.5.15.1, which stems from misuse of the /user/sessions endpoint to determine if an account...

PT-2023-35474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue concerns error handling in the mmc spi probe function. It was introduced in version v2.6.24 and fixed in version v5.4.232. The actual impact and attack plausibility have not yet...

PUB-A-259323725

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...