13108 matches found
CVE-2023-46424
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...
CVE-2023-46415
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...
CVE-2023-46419
CVE-2023-46419 affects TOTOLINK X6000R with firmware 9.4.0cu.652_B20230116. The issue is a remote command execution via the sub_415730 function. Root cause per the documents is a vulnerability in that function, enabling network-exposed RCE with no user interaction and affecting confidentiality, i...
CVE-2023-46418
TOTOLINK X6000R is affected (version 9.4.0cu.652_B20230116). The vulnerability is a remote code execution via the sub_412688 function. Root cause: an issue in the sub_412688 routine allows an attacker to execute commands remotely. Impact is described as high/critical (per CVE records). There is n...
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...
CVE-2023-46416
TOTOLINK X6000R firmware version 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability via the sub_41A414 function. Multiple sources document an RCE impact with high/critical severity, enabling an attacker to execute commands remotely without authentication. The exac...
CVE-2023-46420
TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote code execution vulnerability in the sub_41590C function. The issue enables an attacker to execute arbitrary commands remotely (RCE). Impact is reported as high/critical across confidentiality, integrity, and availability. The vulnerab...
CVE-2023-46415
The CVE-2023-46415 entry concerns TOTOLINK X6000R, affected version 9.4.0cu.652_B20230116, with a remote command execution (RCE) vulnerability exploitable via the sub_41E588 function. Documents indicate impact is high, with potential unauthorized command execution affecting confidentiality, integ...
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...
CVE-2023-46420
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...
CVE-2023-46418
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub412688 function...
CVE-2023-46422
CVE-2023-46422 affects TOTOLINK X6000R, specifically v9.4.0cu.652_B20230116. The vulnerability is a remote command execution via the sub_411994 function, impacting firmware with high/severe impact (CVE metrics: CRITICAL/ HIGH by CVSS 3.1). The connected sources confirm the affected component and ...
CVE-2023-46423
Summary: CVE-2023-46423 affects TOTOLINK X6000R devices, specifically version 9.4.0cu.652_B20230116, with a remote command execution vulnerability exposed via the sub_417094 function. The NVD entry rates the impact as high to critical (CVSSv3.1: base 9.8, network attack vector, no user interactio...
Oracle Linux 8 : php:8.0 (ELSA-2023-5927)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5927 advisory. libzip php 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted t...
Important: exim
Issue Overview: Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1470/ CVE-2023-42116 Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability NOTE:...
Mozilla: RCE on worker host due to unsanitized "env" variable name in task definition on community-tc.services.mozilla.com
The task definition attempted to escape parameters passed to the podman command before running the container, but the custom shell.escape function was not applied to the environment variable name, allowing for command execution on the worker host. The community-tc.services.mozilla.com instance...
Debian dla-3622 : libaxis-java - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3622 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3622-1 [email protected] https://www.debian.org/lts/security/...
Oracle Linux 9 : php (ELSA-2023-5926)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5926 advisory. 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Royal Elementor Addons and Templates 1.4.78 - Unauthenticated Arbitrary File Upload
Description The plugin does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Note that this vulnerability is identical to https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34/ as it was introduce...
