1462 matches found
CVE-2022-47986
CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...
CVE-2022-47986
CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: python3 poc.py https://xxxxx whoami...
IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via a YAML deserialization flaw. This can allow an attacker to send a specially crafted obsolete API call and thereby execute arbitrary code, obtain sensitive data, and/or execute other unauthorized operations...
EUVD-2026-75802
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
CVE-2026-75777
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
CVE-2026-75777
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 are vulnerable to a container escape caused by unrestricted system calls being permitted within the container. A local attacker with low privileges can exploit this to break out of the container, resulting in high impact to confidentialit...
CVE-2026-75777 Multiple vulnerabilities in IBM Aspera Enterprise Webapps
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
CVE-2026-75777 Multiple vulnerabilities in IBM Aspera Enterprise Webapps
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
CVE-2026-75777: Improper Privilege Management
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
PT-2026-89609
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex
Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps
Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.6 Vulnerability Details CVEID:CVE-2026-54500 DESCRIPTION: Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj.load in :object mode reads...
The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to the improper implementation of the sequence of actions to be performed. This allows an attacker to trigger a service failure.
The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service...
The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to inconsistencies in the responses to incoming requests. This allows an attacker to gain unauthorized access to protected information.
The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to insufficient control over interaction frequencies. This allows a malicious actor to trigger a service failure.
The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex
Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.17 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C ...
Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway
Summary Multiple vulnerabilities were addressed in IBM Aspera HTTP Gateway version 2.3.4 Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps
Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.5 Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router...
Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares
Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.4 Vulnerability Details CVEID:CVE-2026-57234 DESCRIPTION: Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by...