The vulnerability of the MinIO object storage server, related to insecure management of privileges, allows an attacker to elevate their privileges to the root level.

The vulnerability of the MinIO object storage server is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

VulnCheck KEV: CVE-2023-31446

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...

Sierra Wireless MGOS 操作系统命令注入漏洞

Sierra Wireless MGOS is a wireless communication device from Sierra Wireless Canada. An operating system command injection vulnerability exists in Sierra Wireless MGOS. An attacker can exploit this vulnerability to execute arbitrary commands as the root user...

VulnCheck KEV: CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

PT-2024-10780 · Omg2000 +1 · Omg2000 +1

Name of the Vulnerable Software and Affected Versions: oMG2000 versions 3.15.1 and earlier MG90 versions 4.2.1 and earlier Description: A command injection is possible through the user interface, allowing arbitrary command execution as the root user. Recommendations: For oMG2000 versions 3.15.1 a...

CVE-2020-15934

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine...

CVE-2020-15934

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine...

Dell RecoverPoint for Virtual Machines OS Command Injection Vulnerability

Dell RecoverPoint for Virtual Machines is a data protection and recovery solution for virtual machine environments. An OS command injection vulnerability exists in Dell RecoverPoint for Virtual Machines. The vulnerability stems from a lack of proper validation of user input. An attacker could use...

PT-2024-17749 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this issue. The specific flaw...

The software for data protection solutions from Dell RecoverPoint for virtual machines has a vulnerability related to improper verification of the cryptographic signature. This vulnerability allows attackers to elevate their privileges to the root level.

The vulnerability of the Dell RecoverPoint data protection software for virtual machines is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 introdution This vulnerability takes advant...

The vulnerability of the Veeam Agent for Linux data backup tool lies in the absence of an authentication procedure, which allows attackers to elevate their privileges to the root level.

The vulnerability of the Veeam Agent for Linux data backup tool is related to the absence of an authentication process. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

VulnCheck KEV: CVE-2019-11001

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root...

PT-2024-10777 · Unknown · Abe Service

Name of the Vulnerable Software and Affected Versions: ABE service affected versions not specified Description: The issue is related to flaws in the verification of input parameters. An attacker can input carefully constructed commands to make the ABE service execute some commands with root...

The vulnerability of the “edgserver” service in the microprogramming software for multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the “edgserver” service in the microprogramming software for multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the lack of measures taken to neutralize the special elements used in the operating system commands...

CVE-2024-31891

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system...

CVE-2024-31891

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system...

CVE-2024-31891 IBM Storage Scale privilege escalation

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system...

CVE-2024-31891 IBM Storage Scale privilege escalation

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system...

CVE-2024-31891

IBM Storage Scale GUI 5.1.9.0–5.1.9.6 and 5.2.0.0–5.2.1.1 contain a local privilege escalation vulnerability. A user with command line access to the scalemgmt account can elevate privileges to root on the host OS. Affected versions include 5.1.9.x and 5.2.x prior to fixes. Remediation: upgrade to...