32679 matches found
CVE-2024-3116
CVE-2024-3116 affects pgAdmin
CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4
pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...
pgAdmin 安全漏洞
pgAdmin is an open source administration and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin 8.4 and prior versions that stems from a remote code execution RCE vulnerability in the binary path API...
CVE-2024-27674
Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...
The vulnerability of TP-Link Omada er605 microcontroller-based software is caused by a full-integer overflow, allowing an attacker to execute arbitrary code.
The vulnerability of TP-Link Omada er605 microprogramming software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code within the context of a binary file named cloud-brd...
CVE-2023-51453
A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....
WatchGuard XTM Firebox Unauthenticated Remote Command Execution Exploit
This Metasploit module exploits a buffer overflow at the administration interface 8080 or 4117 of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint /agent/login. This...
Siemens Polarion ALM Detection
Binary data siemenspolarionalmdetect.nbin...
Linear eMerge Code RCE (CVE-2019-7256)
Binary data linearemergecve-2019-7256.nbin...
Fedora: Security Advisory (FEDORA-2024-de10068888)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-3094
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...
Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)
Binary data xzutilsbackdoorcve-2024-3094.nbin...
CVE-2024-0259
Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to ga...
Untrusted Search Path
PanelSwWix4.Sdk is vulnerable to Untrusted Search Path. The vulnerability is due to Burn's practice of copying binaries to the unprotected C:\Windows\Temp directory and running them from that unprotected location. This directory is not adequately protected against low privilege user modifications...
Critical: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift Builds 1.0.1
An update is now available for Red Hat OpenShift Builds 1.0. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...
pgAdmin Binary Path API RCE
pgAdmin use exploit/windows/http/pgadmin/binarypathapi msf undefinedbinarypathapi show actions ...actions... msf undefinedbinarypathapi set ACTION msf undefinedbinarypathapi show options ...show and set options... msf undefinedbinarypathapi run This module requires Metasploit:...
PT-2024-15419 · Fortra · Robot Schedule Enterprise Agent
Name of the Vulnerable Software and Affected Versions: Fortra's Robot Schedule Enterprise Agent for Windows versions prior to 3.04 Description: The issue allows a low-privileged user to overwrite the service executable. When the service is restarted, the replaced binary runs with local system...
CVE-2024-0077
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...
CLSA-2024-1711475067 libssh: Fix of 2 CVEs
CVE-2023-1667: fix possible NULL-pointer dereference during re-keying with algorithm guessing - CVE-2023-48795: fix the prefix truncation attack on Binary Packet Protocol...