CVE-2024-21989 Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges...

CVE-2024-21989

CVE-2024-21989 affects NetApp ONTAP Select Deploy administration utility (versions 9.12.1.x, 9.13.1.x, 9.14.1.x). A read-only user can escalate privileges due to the vulnerability. Connected advisories confirm affected versions and privilege escalation risk; mitigation guidance varies—PT-Security...

FUDForum 安全漏洞

FUDForum is a PHP-based open source forum software. A security vulnerability exists in FUDForum version v3.1.3, which originates from a stored cross-site scripting XSS vulnerability in the SQL statements field of /adm/admsql.php...

CVE-2024-21063

Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft component: Benefits Administration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2024-21063

The CPT/PT Security report PT-2024-3531 documents a vulnerability in PeopleSoft Enterprise HCM Benefits Administration (version 9.2) due to insufficient input validation in the Benefits Administration component.An attacker with logon access and low privileges can exploit this (with user interacti...

CVE-2024-3871 Authenticated Remote Command Injection in Delta Electronics DVW

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote unauthenticated attackers t...

CVE-2024-3871 Authenticated Remote Command Injection in Delta Electronics DVW

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote unauthenticated attackers t...

CVE-2024-3871

CVE-2024-3871 affects Delta Electronics DVW-W02W2-E2 web administration interface, with versions up to 2.5.2. The issue stems from command injections and stack overflows in the web UI, enabling remote attackers to achieve remote code execution with elevated privileges. The NVD entry states this c...

CVE-2024-3871: Improper Neutralization of Special Elements used in a Command

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote unauthenticated attackers t...

Oracle PeopleSoft Products 安全漏洞

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation USA. The products provide human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's...

PT-2024-3531 · Oracle · Peoplesoft Enterprise Hcm Benefits Administration

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Benefits Administration version 9.2 Description: The issue is related to insufficient input validation in the Benefits Administration component. It allows a low-privileged attacker with logon access to the...

PT-2024-28154

Name of the Vulnerable Software and Affected Versions Delta Electronics DVW-W02W2-E2 versions 2.5.2 and earlier Description The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users, which implements features affected by command injections and stack overflows...

Iranian MuddyWater Hackers Adopt New C2 Tool 'DarkBeatC2' in Latest Campaign

The Iranian threat actor known as MuddyWater has been attributed to a new command-and-control C2 infrastructure called DarkBeatC2, becoming the latest such tool in its arsenal after SimpleHarm, MuddyC3, PhonyC2, and MuddyC2Go. "While occasionally switching to a new remote administration tool or...

How To: Configure Multi Factor Authentication (MFA) for NetScaler (ADC) administration.

Configure Multi Factor Authentication MFA to harden security login for NetScaler administration...

CVE-2024-25007

Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...

CVE-2024-25007

CVE-2024-25007 affects Ericsson Network Manager (ENM) versions prior to 23.1. The issue resides in the export function of the application log, where Improper Neutralization of Formula Elements in a CSV File can enable code execution or information disclosure. Impact is limited to integrity and av...

Cross Site Scripting (XSS)

Bonita is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate input validation on a UI screen within the administration panel, allowing malicious scripts to be stored and executed...

GHSA-8VJ9-5V5Q-FHCH Bonita cross-site scripting vulnerability

Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel...

CVE-2024-27609

Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel...

PT-2024-23639 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/configguide/ipsec guide 1.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, as a temporary workaround,...