172 matches found
caldera -- Remote Code Execution
MITRE Caldera contributor report: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is...
Acronis Cyber Protect Cloud Agent 代码问题漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A code issue vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent 39378. An attacker could exploit the vulnerability to elevate privileges...
CVE-2024-50714
A Server-Side Request Forgery SSRF in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component...
CVE-2024-50715
An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component...
The vulnerability of the USER_AGENT field in the /usr/bin/httpd file of the TP-Link RE365 Wi-Fi signal booster software allows a hacker to execute arbitrary code.
The vulnerability of the USERAGENT field in the /usr/bin/httpd file of the TP-Link RE365 Wi-Fi signal booster software is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted network...
CVE-2024-7634
NGINX Agent's "configdirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory...
Palo Alto Networks Cortex XDR Security Vulnerability
Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from U.S.-based Palo Alto Networks. A security vulnerability exists in Palo Alto Networks Cortex XDR that stems from improper file signature checkin...
Palo Alto Networks Cortex XDR Security Vulnerability
Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, Inc. in the United States. A security vulnerability exists in Palo Alto Networks Cortex XDR Agent Windows that originates...
The vulnerability of the Test Agent component of the testing and monitoring platform for physical, hybrid, and virtual networks in Juniper Networks’ Junos OS Evolved network devices of the ACX series allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Test Agent component of the testing and monitoring platform for physical, hybrid, and virtual networks in Paragon Active Assurance for Juniper Networks’ Junos OS Evolved network devices of the ACX series is related to the unencrypted storage of user data. Exploiting this...
baramundi EMM Agent security vulnerability
baramundi EMM Agent is an agent application from baramundi USA. A security vulnerability exists in baramundi EMM Agent version 23.1.50 and earlier, which originates from a vulnerability that allows an attacker to cause a denial of service via a crafted password parameter request...
PT-2023-13452 · Cambium · Cambium Enterprise Wi-Fi System
Name of the Vulnerable Software and Affected Versions: Cambium Enterprise Wi-Fi System Software versions prior to 6.4.2 Description: The issue is related to the lack of sanitization of the ping host argument in the device-agent of the Cambium Enterprise Wi-Fi System Software. This can potentially...
BMC Software PATROL Agent Security Vulnerability
BMC Software PATROL Agent is a core component of the BMC ProactiveNet architecture from BMC Software, Inc. that is used to monitor and manage distributed environments. A security vulnerability exists in BMC Software PATROL Agent version 20.08.00 and earlier, which originates from allowing local...
Acronis Agent和Acronis Cyber Protect 安全漏洞
Acronis Agent and Acronis Cyber Protect are both products of Acronis Singapore.Acronis Agent is an agent software.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security and endpoint management capabilities suc...
PT-2023-4681 · Acronis · Acronis Agent +2
Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 30991 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to sensitive information disclosure due to excessive collection of system information. This is caused by...
SUSE-SU-2023:2947-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the...
The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system allow attackers to gain unauthorized access to protected information.
The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system are related to the transmission of data in an unencrypted form. Exploiting these vulnerabilities can allow a malicious actor to gain unauthorized access ...
The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro, Apex One and Apex One as a Service, allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the ApexOne Security Agent in antivirus software programs Trend Micro Apex One and Apex One as a Service is related to the use of an insecure search path. Exploiting this vulnerability allows a attacker to enhance their privileges and execute arbitrary code...
Acronis Agent和Acronis Cyber Protect 信任管理问题漏洞
Acronis Agent and Acronis Cyber Protect are both products of Acronis Singapore.Acronis Agent is an agent software.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security, and endpoint management capabilities su...
CVE-2023-2273
Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write...
