Microsoft Windows SMB Server 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA, and a remote code execution vulnerability exists in Microsoft Windows Server Service. The vulnerability is caused by a flaw in the server service component. An attacker could exploit the vulnerability to execute...

PT-2022-2723 · Microsoft · Windows Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows Server Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system, allowing remote attackers to execute arbitrary code and affect the system. This can be...

The vulnerability of the Enterprise Server Service in the Avalanche mobile device management system allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the Enterprise Server Service in the Avalanche mobile device management system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

Security Bulletin: Vulnerability in Apache Log4j affects IBM SPSS Analytic Server (CVE-2021-44228)

Summary There is a vulnerability in the version of Apache Log4j that was installed in IBM SPSS Analytic Server. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, cause...

Gryphon Tower Command Injection Vulnerability

A command injection vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from a failure to properly filter user input for special characters, commands, etc. in the parameters of operation 49 in the controllerserver service on the router. An unauthenticate...

CVE-2021-20144

An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

CVE-2021-20139

An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to...

Command injection

An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

Command injection

An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to...

PT-2021-13798

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers affected versions not specified Description: An unauthenticated command injection issue exists in the parameters of operation 32 in the controller server service. An unauthenticated remote attacker on the same network ca...

Gryphon Tower 操作系统命令注入漏洞

A command injection vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from a failure to properly filter user input for special characters, commands, etc. in the parameters of operation 49 in the controllerserver service on the router. An unauthenticate...

PT-2021-13801

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers affected versions not specified Description: An unauthenticated command injection issue exists in the parameters of operation 49 in the controller server service. An unauthenticated remote attacker on the same network ca...

PT-2021-13799

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers affected versions not specified Description: An unauthenticated command injection issue exists in the parameters of operation 41 in the controller server service. An unauthenticated remote attacker on the same network ca...

CVE-2021-42128

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service...

CVE-2021-42128

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service...

Design/Logic Flaw

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service...

CVE-2021-42128

Summary: CVE-2021-42128 affects Ivanti Avalanche prior to 6.3.3, via the Enterprise Server Service. The vulnerability stems from an exposed dangerous function in the Enterprise Server Service that permits an authentication bypass, enabling privilege escalation. Multiple connected sources confirm:...

CVE-2021-42128: Exposed Dangerous Method or Function

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service...

PT-2021-5424 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.3.3 Description: The issue is related to an exposed dangerous function in the Enterprise Server Service of Ivanti Avalanche, which can be exploited for privilege escalation. This vulnerability is associate...

Microsoft Windows Server Remote Code Execution (CVE-2009-3103)

Microsoft Server Message Block SMB Protocol is a Microsoft network file sharing protocol used in Microsoft Windows. A vulnerability exists in Microsoft Server Message Block SMB Protocol that could allow remote attackers to execute arbitrary code on the vulnerable system due to memory corruption...