Onyxia 代码注入漏洞

Onyxia is an open source web application from InseeFrLab designed to be the glue between multiple open source backend technologies. A code injection vulnerability exists in Onyxia versions prior to 4.2.0, prior to 3.1.1, and prior to 2.8.2, which originates from the ability of an authenticated us...

CVE-2024-12729

A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 21.0.1...

CVE-2023-23356 QuFirewall

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-48889

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...

The vulnerability of the salt-call command in the configuration management system and remote execution of Salt operations allows a attacker to trigger a service failure.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to insufficient validation of input data in the columns. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2024-9826 · Unknown · Simplexlsx

Name of the Vulnerable Software and Affected Versions: SimpleXLSX versions 1.0.12 through 1.1.13 Description: The issue is related to the execution of arbitrary JavaScript code when calling the extended toHTMLEx method in SimpleXLSX. This can allow a remote attacker to execute arbitrary JavaScrip...

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network administration allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the Web interface for managing Cisco Secure Firewall Management Center software formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2024-28980

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2024-28980

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2024-28980

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2024-28980

Dell RecoverPoint for VMs (versions 6.0.x) is affected by CVE-2024-28980 due to use of a broken or risky cryptographic algorithm in the SSH component. An unauthenticated attacker with remote access could potentially achieve remote code execution. Public documentation references a Dell security ad...

ComfyUI Bmad Nodes 安全漏洞

ComfyUI Bmad Nodes is a utility node for ComfyUI by the bmad4ever individual developer. A security vulnerability exists in ComfyUI Bmad Nodes that stems from an authentication bypass in the BuildColorRangeHSVAdvanced, FilterContour, and FindContour custom nodes, which could lead to the execution ...

PT-2024-9594 · Dell · Dell Emc Recoverpoint For Vms

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for VMs versions 6.0.x Description: The issue is related to the use of a broken or risky cryptographic algorithm in the SSH component. An unauthenticated attacker with remote access could potentially exploit this, leading to...

CVE-2024-49127

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2024-49102

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

The vulnerability of the web console of the automation process management tool for IT services, Ivanti Cloud Services Appliance, allows a hacker to execute arbitrary SQL queries.

The vulnerability of the web console of the Ivanti Cloud Services Appliance, which is used for automating IT service management processes, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL querie...

PT-2024-17359 · Gfi · Gfi Archiver

Name of the Vulnerable Software and Affected Versions: GFI Archiver affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this issue. The specific flaw exists withi...

CVE-2024-49091 Windows Domain Name Service Remote Code Execution Vulnerability

...

PT-2024-9932 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to insufficient protection of the web page structure in Adobe Experience Manager, which could allow a remote attacker to execute arbitrary code...