CVE-2023-20097

A vulnerability in Cisco access points AP software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker...

CVE-2023-20065

A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient restrictions on the hosted application. An attacker could exploit thi...

DEBIAN-CVE-2023-1281

Use After Free vulnerability in Linux kernel traffic control index filter tcindex allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcfextsexec' is called with the destroyed tcfext. A local attacker user can u...

UBUNTU-CVE-2023-1281

Use After Free vulnerability in Linux kernel traffic control index filter tcindex allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcfextsexec' is called with the destroyed tcfext. A local attacker user can u...

CVE-2023-1281

Use After Free vulnerability in Linux kernel traffic control index filter tcindex allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcfextsexec' is called with the destroyed tcfext. A local attacker user can u...

Zyxel Unauthenticated LAN Remote Code Execution Exploit

This Metasploit module exploits a buffer overflow in the zhttpd binary /bin/zhttpd. It is present on more than 40 Zyxel routers and CPE devices. The code execution vulnerability can only be exploited by an attacker if the zhttp webserver is reachable. No authentication is required. After...

Important: device-mapper-multipath

Issue Overview: multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to loc...

Important: cups

Issue Overview: An authorization vulnerability was found in the CUPS printing system. This security vulnerability occurs when local authorization happens. This flaw allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key and perform arbitrary code execution...

PT-2023-2224 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Cisco IOx application hosting subsystem could allow an authenticated, local attacker to elevate privileges to root on an affected device. This issue is...

PT-2023-2266 · Cisco · Cisco Access Points

Name of the Vulnerable Software and Affected Versions: Cisco access points AP software affected versions not specified Description: A vulnerability in Cisco access points software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This...

Important: device-mapper-multipath

Issue Overview: A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulat...

Zyxel Unauthenticated LAN Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'Zyxel Unauthenticated LAN Remote Code Execution', 'Description' = %q This module exploits a buffer overflow in the zhttpd binar...

Linksys AX3200 操作系统命令注入漏洞

Linksys Holdings Linksys AX3200 is a router from Linksys Holdings. An operating system command injection vulnerability exists in the Linksys AX3200 version V1.1.00, which can be exploited by an attacker to obtain a list of files and also execute commands as the root user...

CBL Mariner 2.0 Security Update: device-mapper-multipath (CVE-2022-41973)

The version of device-mapper-multipath installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41973 advisory. - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, ...

D-Link DIR820LA1 操作系统命令注入漏洞

The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of an operating system command injection vulnerability that can be exploited by an attacker to elevate privileges to root via a...

go-huge-util 路径遍历漏洞

go-huge-util is a utility function commonly used in Go. A path traversal vulnerability exists in go-huge-util versions prior to 0.0.34. This vulnerability can be exploited to access files and directories stored outside of the web root folder...

CVE-2023-1389

TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...

PT-2023-4660 · Tp Link · Tp-Link Tapo C210

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C210 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit th...

kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution...

PT-2023-2113 · Aruba Networks · Clearpass Onguard

Name of the Vulnerable Software and Affected Versions: ClearPass OnGuard Linux agent affected versions not specified Description: The issue is related to insecure privilege management in the ClearPass OnGuard component of the Aruba Networks ClearPass Policy Manager for Linux. It allows malicious...