CVE-2022-48070

Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...

PHICOMM K2G A1 操作系统命令注入漏洞

The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM, China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.534.263, which stems from the operation of the autoUpTime parameter of its automatic upgrade feature that allows an attacker to implement command...

CVE-2022-48072

Phicomm K2G v22.6.3.20 is affected by a command injection vulnerability in the automatic upgrade function, exploitable via the autoUpTime parameter. The root cause is improper handling of input in the upgrade process, allowing arbitrary commands to be executed with the device’s privileges. CVSSv3...

[SECURITY] Fedora 36 Update: golang-github-hashicorp-consul-migrate-0.1.0-9.20190602git678fb10.fc36

Consul-migrate is a Go package and CLI utility to perform a very specific data migration for Consul servers nodes. Between Consul versions 0.5.0 and 0.5.1, the backend for storing Raft data was changed from LMDB to BoltDB. To support seamless upgrades, this library is embedded in Consul version...

[SECURITY] [DLA 2338-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2338-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 22, 2020 https://wiki.debian.org/LTS -...

Release notes for Veeam Backup for Microsoft 365 4a

Challenge Release Notes for Veeam Backup for Microsoft 365 4a. Cause Please confirm you are running Veeam Backup for Microsoft 365 version 2.0, 3.0 or 4.0 prior to installing the new version 4a 4.0.0.1553. You can check the product version under Help About in the Veeam Backup for Microsoft 365...

CVE-2019-3977

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can trick the router into "upgrading" to an older version of RouterOS and possibly reseting all the system...

HPSBPI03563 rev 1 - SMTP Credentials Vulnerability for HP Designjet and HP Latex printers

Potential Security Impact Potential exposure of SMTP credentials when configuring HP Designjet and HP Latex printers. Reported by: Nicodemo Gawronski VULNERABILITY SUMMARY HP has identified a potential security vulnerability with some HP Designjet and HP Latex printers that may expose the...

Millet smart cameras small ants there is a remote command execution vulnerability-vulnerability warning-the black bar safety net

! t0167153064b2673d18. png Vulnerability description: Small ants Camera application management program the presence of a remote command execution vulnerability through the web interface with root privileges to execute arbitrary system commands without any web permissions, now the official latest...

The fastest fix bash vulnerabilities-vulnerability warning-the black bar safety net

If you run the following command env x=' :;; echo vulnerable' bash-c 'echo hello' The output result is: vulnerable hello Then there is the vulnerability, the need to quickly repair Run the command: curl https://raw. githubusercontent.com/luofei614/bashfix/master/bashfix/bash And then automaticall...

Debian DSA-2908-1 : openssl - security update

Multiple vulnerabilities have been discovered in OpenSSL. The following Common Vulnerabilities and Exposures project ids identify them : - CVE-2010-5298 A read buffer can be freed even when it still contains data that is used later on, leading to a use-after-free. Given a race condition in a...

ws2help.dll mention the right of 0day-vulnerability warning-the black bar safety net

The method provides: miao（the Northern base team Information source: the eighth programming www. debugc. com7 There is a mention of the right way, that is nothing to the progress of time, you can replace the service of a program, in the server restart time to obtain a permission. This has a...

Mandrake Security Advisory MDVSA-2009:017 (kdebase)

The remote host is missing an update to kdebase announced via advisory MDVSA-2009:017. OpenVAS Vulnerability Test $Id: mdksa2009017.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:017 kdebase Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

On mcafee the process of learn-vulnerabilities and early warning-the black bar safety net

mcafee in total there are 7 processes 1:frameworkservice.exe: this process can be in the system services found in the Corresponding to the service"mcafee framework" It is used to do what? In fact, it is mcafee's background framework of the process,mcafee product of the shared components of the...