17422 matches found
OESA-2024-2170 libarchive security update
is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...
Linux OverlayFS Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Local Privilege Escalation via CVE-2023-0386', 'Description' = %q This exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the...
The vulnerability of the invesalius/reader/dicom.py component of the medical software used to create virtual reconstructions of human structures, InVesalius, allows a perpetrator to execute arbitrary code.
The vulnerability of the invesalius/reader/dicom.py component of the medical software for creating virtual reconstructions of human structures, InVesalius, is related to insufficient validation of the input data. Exploiting this vulnerability could allow an attacker, operating remotely, to execut...
CVE-2024-47180
Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...
CVE-2024-47180
CVE-2024-47180 affects Shields.io self-hosted instances using versions before server-2024-09-25. The vulnerability arises from the JSONPath library used by Dynamic JSON/TOML/YAML badges, enabling remote code execution if a crafted JSONPath expression is requested. Impact is remote code execution ...
CVE-2024-47180 Shields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badges
Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...
cups 安全漏洞
CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS cups-browsed, which can be exploited by an attacker to remotely execute arbitrary commands on the target machine when starting a print job...
PT-2024-6441
Name of the Vulnerable Software and Affected Versions CUPS versions 2.x cups-filters versions up to 2.0.1 Description The issue is related to the FoomaticRIPCommandLine function in the CUPS printing system, which allows remote command execution via a PPD file. This can be exploited when combined...
PT-2024-32279
Name of the Vulnerable Software and Affected Versions Progress Software WhatsUp Gold versions prior to 2024.0.1 Description This issue involves a directory traversal that can lead to remote code execution. An unauthenticated remote attacker can exploit this to execute code within the context of t...
Online Flight Booking System 1.0 Arbitrary File Upload
============================================================================================================================================================================= | Title : Online Flight Booking System 1.0 Remot File Upload vulnerability | | Author : indoushka | | Tested on : windows 1...
Online Job Search System 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : Online Job Search System 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
The vulnerability of MediaTek’s WLAN microprogramming software chip allows a hacker to execute arbitrary code.
The vulnerability of the WLAN microprogramming software of MediaTek’s chips lies in the fact that the execution of operations goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0004
CVE-2024-0004 affects Pure Storage FlashArray Purity. A condition exists where a user with the array-admin role can remotely execute arbitrary commands to escalate privileges on the array. The available documents confirm the vulnerability topic and impact (remote command execution with high/criti...
CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array...
PT-2024-6994 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.58 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the DevTools of Google Chrome and Microsoft Edge browsers. This vulnerability...
The vulnerability of the Reporter Widget component in the Veeam ONE monitoring software allows a attacker to execute arbitrary HTML code.
The vulnerability of the Reporter Widgets component of the Veeam ONE monitoring software lies in the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...