Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from a path traversal...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands with SYSTEM privileges...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

PT-2024-13206 · Cobham · Cobham Sailor Vsat Ku

Name of the Vulnerable Software and Affected Versions: Cobham SAILOR VSAT Ku version 164B019 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the sub 21D24 function in the acu web component. Recommendations: For Cobham SAILOR VSAT Ku version 164B01...

Petrol Pump Management Software v1.0 - Remote Code Execution Vulnerability

Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution RCE Exploit Author: Sandeep Vishwakarma Vendor Homepage: https://www.sourcecodester.com Software Link:https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html Version: v1.0 Tested on:...

Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)

Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution RCE Date: 02/04/2024 Exploit Author: Sandeep Vishwakarma Vendor Homepage: https://www.sourcecodester.com Software Link:https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html Version:...

PT-2024-2928 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an unrestricted file upload vulnerability in the web component of Ivanti Avalanche. This vulnerability can be exploited by a remote attacker to execute arbitrary co...

PT-2024-2905 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Race Condition TOCTOU vulnerability in the web component of Ivanti Avalanche. This vulnerability can be exploited by a remote authenticated attacker to execute...

PT-2024-2915 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is due to incorrect restriction of a pathname to a restricted directory...

PT-2024-2911 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Race Condition TOCTOU vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. This issue is related to...

Beijing Baichuo Smart S42 Security Breach

Beijing Baichuo Smart S42 is an Internet Behavior Management appliance from Beijing Baichuo, China. A security vulnerability exists in Beijing Baichuo Smart S42 v.S42, which originates from a file upload vulnerability. The vulnerability can be exploited to execute arbitrary code via the...

VulnCheck KEV: CVE-2024-27199

Authentication bypass vulnerability in the web component of JetBrains TeamCity...

Malicious code in relativity-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceec81f16c03da2474b6b582560b0fc3bd20fa136bb49dadead29fc397209f70 The OpenSSF Package Analysis project identified 'relativity-web-component' @ 2.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1052 Malicious code in relativity-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceec81f16c03da2474b6b582560b0fc3bd20fa136bb49dadead29fc397209f70 The OpenSSF Package Analysis project identified 'relativity-web-component' @ 2.999.0 npm as malicious. It is considered malicious because: - The...

VulnCheck KEV: CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

Ivanti Policy Secure 9.x / 22.x Multiple Vulnerabilities

The Ivanti Policy Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in the web component of Ivanti Policy Secure 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted...

CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

Privilege escalation

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...