14255 matches found
CVE-2024-29021 SSRF into Sandbox Escape through Unsafe Default Configuration
Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escape via Server Side Request Forgery SSRF. This allows an attacker with sufficient access to the Judge0 API to obtain unsandboxed code execution as root on the...
U.S. Dept Of Defense: GlobalProtect - OS Command Injection #█████████
A command injection vulnerability was discovered in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations. This vulnerability could have enabled an unauthenticated attacker to execute arbitrary code with root privileges on...
PT-2024-22675 · Judge0 · Judge0
Name of the Vulnerable Software and Affected Versions: Judge0 versions prior to 1.13.1 Description: The default configuration of Judge0 leaves the service vulnerable to a sandbox escape via Server Side Request Forgery SSRF. This allows an attacker with sufficient access to the Judge0 API to obtai...
Palo Alto OS Command Injection Vulnerability
Palo Alto OS was recently hit by a command injection zero day attack. These are exploitation details related to the zero day. CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: http POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie:...
PT-2024-2892 · Cisco · Cisco Integrated Management Controller
Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection...
The vulnerability of the svc_dc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of the svcdc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allo...
The vulnerability of the Raw Disk Handler component in VMware Fusion, related to insecure privilege management, allows an attacker to elevate their privileges to the root level.
The vulnerability of the Raw Disk Handler component in VMware Fusion relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...
Cisco IOS XE Software Privilege Escalation (cisco-sa-iosxe-priv-esc-seAx6NLX)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device. This vulnerability is due to improper...
CVE-2024-30381
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices. The...
CVE-2024-30381
CVE-2024-30381 affects Juniper Networks Paragon Active Assurance Control Center (versions 4.1.0–4.2.0). The netrounds-probe-login (probe_serviced) daemon exposes functions that let a Test Agent Appliance push interface state/config and unregister, inadvertently revealing an internal database obje...
CVE-2024-30381 Paragon Active Assurance: probe_serviced exposes internal objects to local users
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices. The...
CVE-2020-8006
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...
CVE-2020-8006
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...
CVE-2024-3400
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the...
CVE-2020-8006
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...
VulnCheck KEV: CVE-2024-3400
Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall...
CVE-2020-8006
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...
PT-2024-10856 · Circontrol · Circontrol Raption
Name of the Vulnerable Software and Affected Versions: Circontrol Raption versions 5.11.2 and earlier Description: The issue is a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging...