CVE-2000-1242

The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...

PT-2025-3480 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 REVB version 2.03 Description: The issue concerns an OS command injection vulnerability in the CGl interface apc client pin.cgi, which allows remote attackers to execute arbitrary commands via the wps pin parameter passed to th...

Malicious code in apc-publish (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11299 Malicious code in apc-publish (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in apc-admin-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11298 Malicious code in apc-admin-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in apc-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4614be6864d24d518f8097a00e5121fadce06de58b52aebd6053691d12b516a6 The OpenSSF Package Analysis project identified 'apc-protobuf' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10384 Malicious code in apc-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4614be6864d24d518f8097a00e5121fadce06de58b52aebd6053691d12b516a6 The OpenSSF Package Analysis project identified 'apc-protobuf' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in apc-official-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec9ad2c18767f0c1f300cda3339260dc2e6216964742630f29b38f76519b901d The OpenSSF Package Analysis project identified 'apc-official-icon' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...

RHSA-2012:0811 Red Hat Security Advisory: php-pecl-apc security, bug fix, and enhancement update

Bulletin has no description...

CVE-2024-4999

CVE-2024-4999 affects Ligowave UNITY (up to 6.95-2), PRO (up to 6.95-1.Rt3883), MIMO (up to 6.95-1.Rt2880), and APC Propeller (up to 2-5.95-4.Rt3352). The issue is a vulnerability in the web-based management interface that could allow an authenticated remote attacker to execute arbitrary commands...

CVE-2024-4999 Ligowave Unity/Pro/Mimo/APC Arbitrary Command Injection

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller:...

CVE-2024-4999 Ligowave Unity/Pro/Mimo/APC Arbitrary Command Injection

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller:...

UPS Network Management Card 4 - Path Traversal Vulnerability

Exploit Title: UPS Network Management Card 4 - Path Traversal Google Dork: inurl:nmc inurl:logon.htm Exploit Author: Víctor García Vendor Homepage: https://www.apc.com/ Version: 4 Tested on: Kali Linux CVE: N/A PoC: curl -k...

UPS Network Management Card 4 - Path Traversal

Exploit Title: UPS Network Management Card 4 - Path Traversal Google Dork: inurl:nmc inurl:logon.htm Date: 2023-12-19 Exploit Author: Víctor García Vendor Homepage: https://www.apc.com/ Version: 4 Tested on: Kali Linux CVE: N/A PoC: curl -k...

The vulnerability of the APC Easy UPS Online Monitoring Software lies in the incorrect limitation of the path to the restricted directory. This allows a hacker to delete any files they desire.

The vulnerability of the APC Easy UPS Online Monitoring Software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

Schneider Electric APC Easy UPS Online deletePdfReportFile Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Schneider Electric APC Easy UPS Online. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

APC UPS Detection Consolidation

Consolidation of APC UPS device detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

APC UPS Detection (HTTP)

HTTP based detection of APC UPS devices / network management cards. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AtomLdr - A DLL Loader With Advanced Evasive Features

A DLL Loader With Advanced Evasive Features Features: CRT library independent. The final DLL file, can run the payload by loading the DLL executing its entry point, or by executing the exported "Atom" function via the command line. DLL unhooking from \KnwonDlls\ directory, with no RWX sections. T...