17422 matches found
Microsoft Windows Multiple Vulnerabilities (KB5022303)
This host is missing an important security update according to Microsoft KB5022303 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-37165
Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...
The vulnerability of the Cloud Management mode of the Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN software allows a hacker to execute arbitrary commands.
The vulnerability of the Cloud Management mode of Zyxel USG FLEX, USG FLEX 50W, USG20W-VPN, ATP, and VPN software lies in the lack of measures taken to neutralize the special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
The vulnerability of the Cloud Management mode of the Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN software allows a hacker to execute arbitrary commands.
The vulnerability of the Cloud Management mode in Zyxel USG FLEX, USG FLEX 50W, USG20W-VPN, ATP, and VPN software for network devices is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway
Citrix is alerting users of a critical security flaw in NetScaler Application Delivery Controller ADC and Gateway that it said is being actively exploited in the wild. Tracked as CVE-2023-3519 CVSS score: 9.8, the issue relates to a case of code injection that could result in unauthenticated remo...
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution...
Blackbone - Windows Memory Hacking Library
Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules loaded...
Advisory ROSA-SA-2023-2195
software: salt 3004.2 WASP: ROSA-CHROME packageevrstring: salt-3004.2-1.src.rpm CVE-ID: CVE-2022-22967 BDU-ID: 2022-03745 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the PAM auth function of the Salt configuration management and remote operations execution system is related to the lack of a vali...
Command injection
A remote command execution RCE vulnerability in the web interface component of Furukawa Electric LatAM 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 allows unauthenticated attackers to send arbitrary commands to the device via unspecified vectors...
Arbitrary Code Injection
Ambari Main is vulnerable to Arbitrary Code Injection. The vulnerability exists in the server agent which allows an attacker to execute arbitrary code remotely by submitting a malicious SpEL expression...
CVE-2023-2507 CleverTap Cordova Plugin 2.6.2 - Reflected XSS
CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...
CVE-2023-30151
A SQL injection vulnerability in the Boxtal envoimoinscher module for PrestaShop, after version 3.1.10, allows remote attackers to execute arbitrary SQL commands via the key GET parameter...
Design/Logic Flaw
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
The vulnerability of the WAVLINK WL-WN531AX2 router’s microprogramming software, related to the implementation of security functions at the client side, allows a perpetrator to execute arbitrary commands.
The vulnerability of the WAVLINK WL-WN531AX2 router’s microprogramming software is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the 1Panel Linux server’s control panel, related to the failure to eliminate special elements used in the operating system commands, allows a hacker to execute arbitrary commands.
The vulnerability of the 1Panel Linux server control panel is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
XWiki 4.3-milestone-2 < 14.10.2 Code Injection Vulnerability (GHSA-4v38-964c-xjmw)
Xwiki is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...
CVE-2023-38198
CVE-2023-38198 affects acme.sh prior to 3.0.6. Root cause: insufficient input validation in the Eval function of the ACME client, allowing remote code execution via arbitrary commands executed from a remote server. Reported in the wild in June 2023. Affected: acme.sh versions
Kofax Power PDF clearTimeOut Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ap...
