14254 matches found
PT-2024-20177 · Chargepoint · Chargepoint Home Flex
Name of the Vulnerable Software and Affected Versions: ChargePoint Home Flex affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. No authentication is required to...
Exploit for Race Condition in Openbsd Openssh
cve-2024-6387-poc a signal handler race condition in OpenSSH...
Motorola Q14 安全漏洞
The Motorola Q14 is a mesh router system from Motorola USA. A security vulnerability exists in the Motorola Q14 prior to v1.5.0.16, which stems from a command injection vulnerability that could allow an authenticated user to execute operating system commands as root via a specially crafted API...
PT-2024-11623 · Motorola · Q14 Mesh Router Firmware +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A command injection issue could allow an authenticated user to execute operating system commands as root via a specially crafted API request. Recommendations: At the moment, there i...
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenMediaVault rpc.php Authenticated Cron Remote Code Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron...
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution Exploit
OpenMediaVault allows an authenticated user to create cron jobs as root on the system. An attacker can abuse this by sending a POST request via rpc.php to schedule and execute a cron entry that runs arbitrary commands as root on the system. All OpenMediaVault versions including the latest release...
Command or parameter injection via unique embedded switch SNMP commands (CVE-2024-5461)
Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...
Exploit for CVE-2024-41628
CVE-2024-41628 Simple exploit script developed by Redshift Cy...
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, where an application with root privileges may be able to execute arbitrary code with kernel privileges...
PT-2024-29513 · Syrotech · Sy-Gpon-1110-Wdont Router
Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: The issue exists due to the presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit...
SyroTech SY-GPON-1110-WDONT 安全漏洞
The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an Access Control Error vulnerability that arises from the presence of root terminal access on the serial interface without proper access control. An attacker could exploit this...
CVE-2024-24621
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user...
CVE-2024-24621 Softaculous Webuzo Authentication Bypass
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user...
Webuzo 安全漏洞
Webuzo is a powerful and easy-to-use web hosting control panel from Webuzo Inc. Allows hosting providers and users to automate server administration tasks while providing customers with the tools they need to manage their sites. A security vulnerability exists in Webuzo that stems from an...
RHUB TurboMeeting 安全漏洞
RHUB TurboMeeting is a collaboration solution from RHUB Corp. It provides web conferencing, remote support, audio conferencing, video conferencing, remote access, and webinar support. A security vulnerability exists in RHUB TurboMeeting versions prior to 8.X. The vulnerability stems from a comman...
CVE-2024-38288
A command-injection issue in the Certificate Signing Request CSR functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underlying server as root...
PT-2024-20481 · Softaculous · Softaculous Webuzo
Name of the Vulnerable Software and Affected Versions: Softaculous Webuzo affected versions not specified Description: The issue allows remote, anonymous attackers to exploit an authentication bypass vulnerability through the password reset functionality, potentially gaining full server access as...
PT-2024-27926 · R Hub · R-Hub Turbomeeting
Name of the Vulnerable Software and Affected Versions: R-HUB TurboMeeting versions prior to 9.x Description: A command-injection issue in the Certificate Signing Request CSR functionality allows authenticated attackers with administrator privileges to execute arbitrary commands on the underlying...
CVE-2024-41135
The CVE-2024-41135 affects HPE Aruba Networking EdgeConnect SD-WAN gateway CLI. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, enabling complete system compromise. Documented impact is high (CVSS 3.1: AV:N/AC:L/PR:H/U...
CVE-2024-41134 Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface
A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as...