17416 matches found
GHSA-QCJQ-7F7V-PVC8 Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF
Summary Fix bypass to the following bugs - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pxmr-q2x3-9x9m - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35 Allowing to inject directly in the app.ini via CRLF to change the value of testconfigcmd and startcm...
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF
Summary Fix bypass to the following bugs - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pxmr-q2x3-9x9m - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35 Allowing to inject directly in the app.ini via CRLF to change the value of testconfigcmd and startcm...
CVE-2024-23741
An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...
CVE-2024-22862
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser...
Metasploit Weekly Wrap-Up 01/26/24
Direct Syscalls Support for Windows Meterpreter Direct system calls are a well-known technique that is often used to bypass EDR/AV detection. This technique is particularly useful when dynamic analysis is performed, where the security software monitors every process on the system to detect any...
CVE-2024-20253
CVE-2024-20253 affects Cisco Unified Communications Manager and related UC/Contact Center products. The root cause is improper processing of user-supplied data read into memory, enabling an unauthenticated, remote attacker to send a crafted message to a listening port and execute arbitrary comman...
CVE-2024-23616
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...
CVE-2024-23624 D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...
UBUNTU-CVE-2023-52076
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...
Remote code execution
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...
PT-2024-19979 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveSysLogParams parameter of the Motorola MR2600. A remote attacker can exploit this issue to achieve command execution...
PT-2024-19980 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv4Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...
PT-2024-19981 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv6Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...
The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
PT-2024-19971 · Symantec · Symantec Server Management Suite
Name of the Vulnerable Software and Affected Versions: Symantec Server Management Suite versions prior to 7.9 Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as SYSTEM. Recommendations: For Symantec Server Management Suit...
The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.
The vulnerability of the kernel in operating systems such as macOS, iOS, and iPadOS is related to a type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2023-51887
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...