Hewlett Packard Enterprise OfficeConnect 1820 Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Hewlett Packard Enterprise OfficeConnect 1820 switches. Authentication is not required to exploit this vulnerability. The specific flaw exists within the defaultpasswordcfg.lua endpoint. The...

Dell PowerPath Management Appliance 操作系统命令注入漏洞

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A command injection vulnerability exists in Dell PowerPath Management Appliance versions 3.3, 3.2, 3.1,...

Dell PowerPath Management Appliance 安全漏洞

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. An elevation of privilege vulnerability exists in Dell PowerPath Management Appliance version 3.3, whic...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : multipath-tools vulnerabilities (USN-5731-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5731-1 advisory. It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combinati...

CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

Code injection

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

Mediatrix 4102 安全漏洞

The Mediatrix 4102 is a VoIP adapter from Mediatrix. A security vulnerability exists in versions prior to Mediatrix 4102 v48.5.2718, which stems from a vulnerability that allows a local attacker to gain root access via the UART port...

PT-2022-26749 · Media5 · Mediatrix 4102

Name of the Vulnerable Software and Affected Versions: Mediatrix 4102 versions prior to 48.5.2718 Description: The issue allows local attackers to gain root access via the UART port. Recommendations: For versions prior to 48.5.2718, update to version 48.5.2718 or later to resolve the issue...

CVE-2022-43096

CVE-2022-43096 concerns the Mediatrix 4102 VoIP adapter. According to the documents, versions prior to 48.5.2718 are vulnerable to a local attack that can grant root access via the UART port. The baseline CVSS–3.1 metrics indicate a physical attack vector, with low exploit complexity, no privileg...

CVE-2022-36786 DLINK - DSL-224 Post-auth RCE.

DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers Network Time Protocol via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router...

CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

Veritas Technologies NetBackup 操作系统命令注入漏洞

Veritas Technologies NetBackup is a storage service from Veritas Technologies, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental...

PT-2022-23625 · D Link · Dlink Router

Name of the Vulnerable Software and Affected Versions: DLINK router version 3.0.8 Description: The issue allows for command injection through the interface used to configure NTP servers via jsonrpc API, potentially running commands with ROOT permissions on the router. This is made possible by...

Cisco Identity Services Engine 操作系统命令注入漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information from the network, users, and devices to formulate and enforce policies to regulate the network. The Cisco Identity Services Engine suffers from an...

F5 Big-IP Create Admin User

This creates a local user with a username/password and root-level privileges. Note that a root-level account is not required to do this, which makes it a privilege escalation issue. Note that this is pretty noisy, since it creates a user account and creates log files and such. Additionally, most ...

xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

CVE-2022-45188

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

Heap overflow

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...