11 matches found
CVE-2026-38945
CVE-2026-38945 作者: Rafael José Núñez Gulías 公司: Iberian Var Group 受影响产品: RayVentory Scan Engine 12.6 Update 8 及更早版本 Raynet 公告: RSEC200967 rvia 在 Raynet 中执行一个 find 命令，该命令的搜索条件未正确终止，以定位 Java 安装。攻击者可以构造满足错误搜索条件的特定目录结构，导致代理程序在 Java 检测过程中执行恶意二进制文件。 root@kitploit: /bin/sh -c "find / -not \ -path '/dev'...
CVE-2025-69600
CVE-2025-69600 作者: Rafael José Núñez Gulías 企業: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet セキュリティアドバイザリ: RSEC200966 Raynet の rvia におけるコマンドインジェクションにより、攻撃者は getconfig、upload、inventory、oracle の各オプションを介してコマンドを実行できます。 バリデーションは（設定プロパティ ForbiddenCurlChars が...
CVE-2025-69599
CVE-2025-69599 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet 勧告: RSEC200965 Raynet の rvia は、制御されていない検索パス要素 の問題に対して脆弱です。共有オブジェクトをロードし、システムバイナリ（.so やヘルパーバイナリなど）を呼び出す際に相対パスが使用されるため、ユーザーが PATH 環境変数の操作を通じて実行される最終的なバイナリや .so...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Version 12.6.4392.49 of the RayVentory Scan Engine contains a security vulnerability. This vulnerability stems from parameter...
EUVD-2025-209737
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Versions of RayVentory Scan Engine 12.6 Update 8 and earlier contain security vulnerabilities. These vulnerabilities allow...
CVE-2025-69599
CVE-2025-69599 affects RayVentory Scan Engine (12.6 Update 8 and earlier). The root cause is privilege escalation when an attacker can influence the PATH environment variable, as described by multiple sources. Red Hat and related advisories corroborate that this condition enables elevated privile...
